xF4F

Privacy Policy

Last updated: February 11, 2026

xF4F ("we", "us", "our") operates xf4f.com. This policy explains what data we collect, why we collect it, and your rights regarding that data.

1. Information We Collect

1.1 Account Information

When you sign in with X (Twitter) OAuth, we receive and store your public profile information:

  • X user ID, username (handle), and display name
  • Profile picture URL
  • X Premium subscription status
  • Public follower and following counts

We do not receive or store your X password. We never post on your behalf, access your direct messages, or read your timeline.

1.2 Platform Activity

We store data generated through your use of xF4F:

  • Follow relationships created through the platform
  • Credit transactions (earned, spent, bonuses, penalties)
  • Referral relationships
  • Tweet share submissions (tweet URL and verification status)
  • Profile information you provide (bio, niche)

1.3 Cookies

We use a session cookie (xf4f_session) to keep you signed in and a referral cookie (ref) to attribute signups. See our Cookie Policy for details.

2. How We Use Your Data

  • Core service: Matching you with other Premium users, tracking follows, calculating credits
  • Verification: Checking that follows are genuine using the X API
  • Anti-abuse: Detecting unfollows, enforcing trust scores, preventing credit farming
  • Leaderboards: Displaying aggregated, anonymizable rankings
  • Communication: Sending service-related notices (we do not send marketing emails)

3. Data Sharing

We do not sell your personal data. We share data only in these cases:

  • Other users: Your public X profile info (handle, name, avatar, Premium status) is visible to other xF4F users for follow matching
  • X/Twitter API: We verify follows through the X API using your public user ID
  • Legal requirements: If required by law, regulation, or legal process

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymized, aggregated data (e.g., total platform statistics) may be retained indefinitely.

5. Data Security

We use industry-standard measures to protect your data, including encrypted sessions (JWT), HTTPS-only connections, and rate limiting. No system is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

You have the right to:

  • Access your personal data (visible in your Settings page)
  • Delete your account and associated data (via Settings)
  • Correct inaccurate data by updating your X profile
  • Object to processing by contacting us

7. Children

xF4F is not intended for users under 18. We do not knowingly collect data from children. If we learn we have collected data from a child, we will delete it promptly.

8. Changes to This Policy

We may update this policy from time to time. We will notify users of material changes by updating the "Last updated" date. Continued use of xF4F after changes constitutes acceptance.

9. Contact

Questions about this policy? Reach us on X at @xf4f_com or via Telegram at t.me/xf4f_com.