Reply Assistant — Privacy

Last updated: 3 October 2026. Developer: HBoot.

What the extension does

Reply Assistant reads the selected social post when you open its panel. It sends the selected text, quoted text, loaded conversation messages and author handles, your optional notes, language preferences and model instructions to your chosen AI provider when you request a translation or reply, or when you open or refresh a conversation with Auto translate enabled. Auto translate is off by default and can be enabled or disabled on the extension settings page. Loading available models sends your API key to the configured models endpoint from the settings page, without any post text; this does not automatically save your settings or key. Connection testing sends a short test message, not a social post. Generated replies are never posted automatically.

Where data goes

Requests go directly from the extension to the HTTPS API endpoint you configure, authenticated with your own API key. That provider processes the request under its own policies and may charge API fees. If you use a gateway, that gateway may route your text to downstream model providers. Review their terms before sending sensitive or non-public material. We do not operate a relay server or receive your posts or API keys.

Local storage

Your language and model settings, plus the floating window size, position and column layout and auto-translation preferences, are stored locally in this browser profile. Keys are stored in memory for the browser session by default. If you choose “Remember key on this device”, the key is stored locally on this device. It is not synced by the extension and local storage is not an encrypted vault. Keys are not provided to the page content script. The extension does not persist reading history, post text or replies. Panel contents remain in memory while the panel exists. Local interaction statistics are enabled by default and can be disabled on the Statistics page. The extension passively observes manual X reply/quote publication actions, success notifications and the metadata in same-origin publication requests/responses, storing dates, website, category, confirmation state and available target/published post IDs locally. It does not save composer text or author handles for statistics or send statistics to the developer or AI provider. Different X accounts in this browser are combined. Pending records are kept for 7 days (up to 200); processed records for up to 90 days, with a total 10,000-record cap. Historical daily totals remain until cleared. Deduplication and corrections cover retained records only.

Permissions

Access to x.com allows the extension to add its panel and extract the selected post and, on request, loaded messages preceding it in its detail page. Conversation ancestry requires your review; unloaded and collapsed messages are not fetched. Storage saves settings, your chosen key storage preference and local interaction statistics. X access also allows a packaged page-world observer to passively inspect same-origin publication request/response metadata without changing requests, issuing extra requests or reading headers, cookies or keys. It forwards only operation IDs and publication relationship IDs to the isolated content script; uncertain attempts require your confirmation. Access to the model API domain is requested when you load its models or save its configuration. The extension does not request cookies, browsing history, or permission to publish posts.

Control and deletion

You can review the read-only post, remove or reorder earlier messages, and add notes before generating replies, cancel an in-progress request, and delete settings and keys from the settings page. On the Statistics page you can disable recording, export statistics, correct or ignore retained publication records, and clear all statistics independently of settings and keys. Statistics cover only observed activity in this browser, not mobile or other devices. Cancelling does not retract data already sent to the provider or guarantee reversal of charges. Close the panel to stop using it; uninstalling removes extension storage. Data already sent to a provider is governed by that provider's retention and deletion policies.

Limited use

Data is used only to provide the disclosed reading, translation and reply-assistance features. It is not sold, used for advertising or collected for remote analytics. Interaction statistics are kept locally for your own review. Our use of user data adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.

Support

Contact hboot0230@gmail.com for support or privacy questions. Never send an API key or private post when reporting an issue.

隐私摘要

在你点击翻译、生成回复，或开启自动翻译后打开或刷新对话时，将所选帖子、已加载的对话消息和作者用户名及补充发送至所配置的模型服务商。密钥由你提供，默认只保留到浏览器会话结束；选择记住时保存在本机，不同步。扩展开发者不接收帖子或密钥，不保存阅读历史、不收集远程分析数据，不自动发布。本地互动统计默认开启，可在统计页关闭；被动观察 X 同源发布请求和成功返回的操作/帖子关系元数据，不改写网络请求或响应、不发送额外请求、不读取请求头、Cookies 或密钥；只在本机保存手动发布操作的日期、网站、类型、确认状态及可用帖子 ID，不保存输入正文，不发送给开发者或模型服务。待确认最多 200 条、保留 7 天，已处理记录最多保留 90 天，总记录上限 10,000 条；历史每日汇总保留至清空。去重和纠错限保留的记录，可导出、修正或清空统计，不同 X 账号合并，不含其他设备数据。取消请求不会撤回已发送的数据，也不保证服务商不计费。可在设置中删除本地设置及密钥。