Privacy Policy

XPickr.app is committed to protecting your privacy. We operate on a data minimization principle, collecting only the specific information necessary to provide our service:

• Twitter URLs you submit for GIF extraction (processed in real-time, not permanently stored)
• Usage analytics including page views, feature usage, and error rates (fully anonymized)
• Technical information including IP address, browser type, operating system, and device type (for security, fraud prevention, and service optimization)
• Session data for maintaining site functionality during your visit

We use the collected information solely for the following purposes, based on our legitimate interest in providing and improving our service:

• Processing your GIF download requests in real-time
• Analyzing usage patterns to improve service quality and user experience
• Detecting and preventing security threats, abuse, and fraudulent activity
• Ensuring compliance with legal obligations and terms of service
• Providing technical support when requested

We implement comprehensive security measures to protect your data:

• Downloaded GIFs are never stored on our servers - they are processed and delivered directly to your device
• Twitter URLs are processed in real-time using secure, encrypted connections and are not permanently stored
• All data transmission is encrypted using TLS 1.3 and industry-standard encryption protocols
• Server infrastructure is protected by firewalls, intrusion detection systems, and regular security audits
• Access to any collected data is restricted to authorized personnel only
• We use secure, industry-standard hosting providers with SOC 2 Type II compliance

We retain data for the minimum time necessary to fulfill our stated purposes:

• Twitter URLs: Not stored permanently - processed and immediately discarded
• Analytics data: Aggregated and anonymized data retained for up to 2 years for service improvement
• Technical logs: Retained for up to 30 days for security and troubleshooting purposes
• Session data: Automatically deleted when your session ends or after 24 hours of inactivity

Our service interacts with limited third parties to provide core functionality:

• Twitter/X API: We use Twitter's public API to retrieve GIF content. No personal information is shared with Twitter beyond what's necessary for the API request
• Analytics services: We use privacy-focused analytics tools that do not track individual users or store personal data
• Infrastructure providers: Our hosting and CDN providers may process technical data as data processors under strict contractual obligations

We do not sell, rent, or share your personal information with third parties for their marketing purposes. Any data sharing is limited to what's necessary to provide our service or as required by law.

We use minimal, essential cookies to ensure proper site functionality:

• Essential cookies: Required for basic site functionality, security, and user preferences (cannot be disabled)
• Analytics cookies: Anonymous usage statistics to improve our service (can be opted out)
• Security cookies: Protection against cross-site request forgery and other security threats

• We do not use advertising or tracking cookies
• We do not use third-party cookies for marketing or advertising purposes
• All analytics data is anonymized and cannot be used to identify individual users

You can disable non-essential cookies in your browser settings or through our cookie preferences. This may affect some site functionality but will not prevent you from using our core GIF download service.

You have comprehensive rights regarding your personal data. You can exercise these rights by contacting us at [email protected]:

• Right to Access: Request information about what personal data we process and how
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (where legally permissible)
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request a copy of your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for analytics or optional features at any time

To exercise these rights, please email us with your specific request. We will respond within 30 days and may require identity verification for security purposes.

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority.

Your data may be processed in different countries to provide our global service:

• Our primary servers are located in secure data centers in the United States and European Union
• Any international data transfers are protected by appropriate safeguards including Standard Contractual Clauses
• We ensure all data processing locations maintain adequate levels of data protection
• You can request specific information about data transfer safeguards by contacting us

We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements:

• We will post any material changes on this page with an updated revision date
• For significant changes affecting your rights, we will provide prominent notice on our website
• Continued use of our service after changes indicates acceptance of the updated policy
• We encourage you to review this policy periodically to stay informed about how we protect your data

If you have any questions about this privacy policy, our data practices, or wish to exercise your rights, please contact us:

• Email: [email protected] (preferred method for fastest response)
• For urgent privacy matters, please include 'URGENT PRIVACY' in your subject line

We typically respond to privacy inquiries within 5-7 business days and will address all requests within 30 days as required by applicable privacy laws.