Privacy Policy
Last updated: 12 November 2026
1. Who is responsible
Vantar Group LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA, runs erasemyposts.com. Contact for privacy questions: [email protected].
2. What we keep
- Your X user ID, username, display name, and your email address if X shares it with us.
- Access tokens for your X account, encrypted on our server, so we can delete posts for you.
- For each post we know: the post ID, date, type (post, reply, repost, quote), like count, and whether you marked it to keep. We do not store the text of your posts. The text stays in your own browser.
- Your delete jobs (counts and status), your orders (product, amount, status) and your remaining deletes.
3. Your X archive
If you upload your X archive, your browser reads the file. Only post IDs, dates, types and like counts are sent to us. The text and the rest of the archive never leave your device.
4. Why we keep it
Only to run the service you asked for: show your posts, delete the ones you choose, send you a report when a job is done, and handle payments. We do not sell your data and we do not use it for advertising.
5. Who else processes data
- X Corp.: we call the X API with your permission to read and delete your posts.
- Stripe: payments, tax and receipts. Stripe acts as merchant of record and keeps payment records under its own policy.
- Hetzner (Germany): our server.
- Cloudflare: DNS and email forwarding.
- Our email provider: to send you job reports.
6. Cookies
We use one cookie that keeps you signed in. It is needed for the service. We use no tracking or advertising cookies.
7. How long we keep it
As long as your account exists. When you delete your account in Settings, we revoke our access to X and delete all data listed in section 2 right away. Server backups are overwritten within 30 days.
8. Your rights
You can ask for a copy of your data, a correction, or deletion at any time. Most of it you can do yourself in Settings. For anything else, write to [email protected]. If you live in the EU or UK, you can also complain to your data protection authority.
9. Security
X tokens are encrypted at rest (AES-256-GCM). The site uses HTTPS only. Access to the server is limited to the operator.