Privacy Policy

Last updated: February 2025

This Privacy Policy describes how Eventually (the “extension” or “we”) collects, uses, and shares information when you use the Eventually browser extension and related services. We display this policy before you sign up or use the service, as required by policies such as the X Developer Policy. Our practices are intended to be no less protective of your privacy than X’s Privacy Policy where they apply to your use of X through our extension.

1. Information We Collect

We may collect the following categories of information:

• Account and identity information – When you sign in with X (Twitter), we receive information from X’s OAuth flow that may include your X user ID, display name, handle, profile image URL, and email (if provided by X). We do not store your X password.
• Bookmarks and X content – When you use the sync feature on x.com/i/bookmarks, the extension reads the bookmarks visible on that page (e.g. post IDs, URLs, text, author handle and name, media URLs, timestamps) and may send this data to our backend (e.g. Supabase) to store and sync your bookmarks. This data is treated as personal data when it can be linked to you.
• Technical and usage data – We may store your session (e.g. auth tokens) locally in the browser’s extension storage so you stay signed in. We do not collect your browsing history outside of the X bookmarks page when you choose to sync.

2. How We Use This Information

We use the information we collect to:

• Provide the extension’s features (sign-in, bookmark sync, and backup).
• Authenticate you and keep your session.
• Operate, secure, and improve our service and fix issues.
• Comply with applicable law and enforce our Terms of Service.

3. How We Share This Information

We may share information as follows:

• With X (Twitter) – Sign-in and use of X’s services are subject to X’s Privacy Policy. When you sign in with X, X receives information per their OAuth and data practices. We do not share your synced bookmarks back to X except as needed to use X’s sign-in or as required by law.
• With our service providers – We use Supabase (and possibly other providers) to run our backend and store data. These providers process data on our instructions and are bound by confidentiality and data protection commitments.
• For legal reasons – We may disclose information if required by law, court order, or government request, or to protect our or others’ rights, safety, or property.

We do not sell your personal information. We do not use X content or information obtained through the extension to target you with advertising outside of X’s platform, in line with the X Developer Agreement and Policy.

4. Data Retention and Security

We retain your account and bookmark data for as long as your account exists or as needed to provide the service and comply with law. You can stop using the extension and sign out at any time. We use industry-standard measures (including secure connections and access controls) to protect your data; no system is completely secure, and we cannot guarantee absolute security.

5. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access or receive a copy of the personal data we hold about you.
• Correct or update that data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority.

To exercise these rights or ask questions about your information, contact us using the details below. We will respond in line with applicable law. For data X holds, you may need to contact X directly (see X’s Privacy Policy).

6. Children

Eventually is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us so we can delete it.

7. International Transfers

Your information may be processed in the United States or other countries where our service providers operate. We take steps so that such transfers are consistent with applicable law (e.g. standard contractual clauses or other approved mechanisms where required).

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the current version in the extension or on our website and indicate the “Last updated” date. Continued use after changes constitutes acceptance of the updated policy. If changes are material, we may provide additional notice where required by law.

9. Contact Us

For any inquiries or requests regarding your information, this Privacy Policy, or our practices (including to request access, correction, or deletion of your data), please contact us:

• By email: at the contact address published for Eventually (e.g. on the extension’s store listing or website).
• By mail or other contact method if we publish it on geteventually.com or in the extension.

We will respond to legitimate requests within the timeframes required by applicable law.