Privacy Policy

2. Privacy summary

DownXVideo does not require an account or an X/Twitter password, cookie, access token, or private message. It does not host downloaded media files or create an account-level download history. The website processes a public post URL that you submit; the extension normally processes the current public page locally and requests public information directly from X. Limited technical data may be processed for delivery, security, analytics, advertising when enabled, and support. Non-essential technologies and advertising choices must be managed through the consent controls applicable to your region.

3. Website link processing and technical information

When you submit a public X/Twitter post URL, the website sends it in the body of a request to the DownXVideo parser. The parser validates the host, extracts the public post ID, requests public post and media information from X, and returns supported media choices, dimensions, formats, source addresses, parser status, and error codes. The selected media file is normally transferred from an X media server directly to your browser; DownXVideo does not receive or store a copy of the file.

The application keeps successful parser results only in an in-memory cache for about 30 seconds and does not write the submitted URL or an account download history to an application database. A short-lived rate-limit key derived from the network address and browser user-agent can be held in process memory for about 60 seconds. Cloudflare and other network infrastructure may independently process IP address, request path, time, user-agent, status, and security signals to deliver, protect, and troubleshoot the service under their own service settings.

• Sources: information you submit, your browser or device, public X/Twitter pages and interfaces, service infrastructure, Google services when enabled, and messages or feedback you choose to send.
• The website does not ask for X/Twitter credentials, authentication cookies, access tokens, private posts, or direct messages.
• Public availability does not remove privacy, copyright, or other rights in a post or media file.

4. Browser extension and device storage

The browser extension reads supported public X/Twitter page structure locally to place download controls. Chrome and Edge can temporarily use limited media information already loaded by the current page; Firefox requests public post information directly from X. Normal extension downloads do not send the post URL or current-page media information to DownXVideo, and the selected file goes from X media servers to the browser download manager.

Extension quality, filename, download-location behavior, custom subfolder, button visibility, and limited support-prompt state are stored in browser local storage on the current device. Temporary download state can use browser session storage. These settings can be removed by clearing extension data or uninstalling the extension. The extension-specific disclosure explains permissions, local processing, optional unpublished failure feedback, retention, and the Chrome Web Store Limited Use commitments in detail.

• Read the browser extension privacy disclosure

5. Analytics, advertising, cookies, and similar technologies

Google Analytics 4 is used to understand traffic sources, page paths, broad location and device categories, feature use, parser outcomes, and actions that hand a download to the browser. Google Signals and advertising personalization signals are disabled in the site configuration. Analytics events are designed not to include a full post URL, media URL, post ID, filename, account credential, or message content. Google and the hosting network can still process IP address and device information as part of delivering their services.

The site uses a one-year dxv_locale preference cookie, local storage for the light or dark theme and a persistent extension-offer dismissal, and session storage for short-lived download-offer state. If Google AdSense is enabled, Google and approved advertising partners may use cookies, local storage, web beacons, IP addresses, device information, and ad events for delivery, measurement, frequency control, and fraud prevention, and for personalization only where the required choice has been obtained. Where Google policy or applicable law requires it, advertising must use an applicable Google-certified consent management platform.

• Necessary or preference technologies: language, theme, privacy choice, security, and basic product state.
• Analytics technologies: traffic and feature measurement, subject to the consent requirements that apply to the visitor.
• Advertising technologies: ad delivery and measurement only when advertising is enabled and subject to applicable consent choices.
• Google Analytics user-level and event-level retention is controlled in the GA4 property and is not represented in this source repository; the operator must keep the public policy aligned with the verified property setting.

• How Google uses information from sites and apps
• Google advertising technologies
• Google Ads Settings

6. Feedback, uninstall survey, and communications

If you email [email protected], the operator and email provider process your address, message, attachments, and later correspondence. Do not send passwords, cookies, access tokens, private messages, or unnecessary sensitive information.

After extension removal, the browser may open an optional survey. The URL contains only extension version, browser family, and interface language. Nothing is sent if you skip it. If you submit it, one reason, an optional comment of up to 500 characters, version, browser family, language, and disclosure version are sent to the DownXVideo feedback service at feedback.downyes.com. Survey records do not store the source IP; a short-lived derived abuse-prevention key can be used. The separate extension disclosure describes the optional, not-yet-published download-failure report flow.

7. Purposes and legal bases

Information is processed only as needed to perform the user-requested link resolution or download, operate local preferences, deliver and secure the service, prevent abuse, diagnose failures, measure and improve features, respond to messages, display and measure advertising when enabled, comply with law, and handle complaints or disputes. Depending on the activity and applicable law, the basis may be performance of your request or contract, the operator’s legitimate interests in a reliable and secure service, your consent for non-essential analytics or advertising technologies, or a legal obligation. Withdrawing consent does not affect processing already lawfully completed and does not disable processing that has another valid basis.

8. Recipients, sale or sharing, and international transfers

Relevant recipients can include Cloudflare for hosting, CDN, DNS, and security; X/Twitter and its media servers for public post and file delivery; Google Analytics; Google AdSense and consented advertising partners when advertising is enabled; feedback.downyes.com for deliberately submitted feedback; the operator’s email provider; browser and extension stores; and professional, legal, or public authorities where required. Each receives only the information involved in its role.

DownXVideo does not sell submitted post links, download history, or extension data and does not use extension data for advertising. Some laws can call advertising-related transfers “sharing” even when no list is sold. If website advertising involving such sharing is enabled, the applicable consent or opt-out control will be provided. Providers may process information in countries other than yours; transfers rely on the provider’s applicable contractual and legal safeguards where required.

9. Retention and security

Data is kept only for the period needed for its stated purpose, legal obligations, or disputes. The application parser cache is about 30 seconds; the in-process rate-limit key is about 60 seconds; website session state lasts until the tab session ends; preference storage lasts until expiry or deletion; extension settings last until cleared or uninstalled; raw uninstall surveys and optional failure reports are deleted after 30 days; deidentified low-cardinality aggregates are kept up to 90 days; abuse-prevention keys up to 24 hours; and support correspondence is normally kept while the request is handled and for up to 24 months afterward unless a longer period is reasonably required. GA4, advertising, hosting, network, browser-store, and email-provider data follow the verified account settings and provider terms. DownXVideo uses access restriction, data minimization, HTTPS, bounded fields, and service controls appropriate to the data, but no service can guarantee absolute security.

10. Your rights, choices, GPC, and Do Not Track

Depending on where you live, you may request access, a copy, correction, deletion, restriction, objection, portability, withdrawal of consent, or an explanation of processing, and may complain to a competent regulator. Where applicable, you may also opt out of sale or sharing, limit certain sensitive-data uses, use an authorized agent, and exercise rights without discrimination. Send a request to [email protected] with enough information to identify the relevant interaction. The operator may verify the request and will respond within the period required by applicable law. Because DownXVideo has no user accounts and intentionally keeps little directly identifying data, it may be impossible to locate a record; the operator will not collect unnecessary data solely to make a record identifiable.

The site does not currently treat the browser Do Not Track header or Global Privacy Control as a separate product setting. This does not override legally required consent or opt-out controls. Google advertising preferences can also be managed through Google Ads Settings. Clearing site or extension storage removes local preferences and may cause notices to appear again.

11. Children, third-party services, and automated decisions

The service is not directed specifically to children and does not intentionally ask children for names, contact details, credentials, or other unnecessary personal information. A parent or guardian who believes a child supplied personal information may contact the operator. X/Twitter, Google, Cloudflare, browser stores, advertisers, linked sites, and the browser download manager are separate services with their own practices; DownXVideo does not control them. DownXVideo does not use personal information to make automated decisions that produce legal or similarly significant effects. Advertising providers may perform ad selection or interest inferences under their own policies when that processing is enabled and permitted.

12. Policy changes, languages, and contact

This policy may change when the product, providers, settings, or law changes. The version and dates at the top identify the current text. A material change will receive a reasonably prominent website or extension notice before a materially new use begins where required. An update will not be used retroactively to make an incompatible past use lawful.

Translations are provided for convenience. To the extent permitted by applicable law, the English version controls if a translation conflicts, subject to mandatory law where you live. All language versions should show the same version, dates, providers, retention periods, contact channel, and feature status. Privacy requests and questions may be sent to [email protected].

Practical privacy review

Use the Twitter video downloader privacy and permission checklist to compare credential requests, website data flow, extension permissions, browser downloads, and access limits.