Privacy & security

Local by default

The Android companion has no analytics, account system, or application backend. Shared X/Threads URLs are parsed locally in your browser.

Network behavior

The companion app itself uses no runtime API. Opening a transformed link, Telegram, or the original social site navigates to that destination because you requested it.

The Userscript only fetches media when you explicitly prepare an image package or archive. Its cross-origin permissions are restricted to known X/Threads media CDN families.

Storage

PWA preferences stay in browser local storage. Userscript preferences and short-lived capture cache use userscript-manager storage. Rich capture cache is bounded and does not persist downloaded image binaries or visible discussion replies.

Archive integrity

Archive SHA-256 values verify the exact archived bytes. They do not prove account ownership, authorship, publication time, or that a social platform served the content at a particular historical time.