Xoot — Privacy Policy
Last updated: 5 November 2026
Xoot is a browser extension that lets you trade tokens directly from X (Twitter). This policy explains exactly what the extension does and does not do with your information.
The short version: Xoot has no accounts and no server of its own. Nothing is sent to us, because there is nothing of ours to send it to. Your settings live on your own device. What leaves your browser goes directly from your browser to the market-data and routing services listed in section 3.
Xoot never has access to your wallet's private key or seed phrase. Xoot does not generate or store keys of any kind.
1. We never have access to your keys or your funds
Xoot is non-custodial. It cannot hold, move, or spend your assets.
- Xoot never asks for, receives, stores, or transmits your wallet's private key, seed phrase, or recovery phrase. There is no code path in the extension capable of doing so, and no field anywhere that accepts one.
- Every transaction is built by a third-party router (Jupiter on Solana, LI.FI on EVM chains) and must be signed by you in your own wallet. Your wallet's confirmation screen is the only thing that authorises a transaction.
- Xoot cannot initiate a transfer, move funds, or trade on your behalf.
2. What is stored on your device
Xoot stores the following locally, using your browser's extension storage. It stays on your device.
| Stored | What it is |
|---|---|
| Preferred wallet | The name of the wallet you last picked for Solana and for EVM chains (e.g. "Phantom"), so the panel offers it first. Not your address, and never keys. |
| Settings | Slippage tolerance, quick-buy amounts, quick-sell percentages, and whether runners are lit up on X. |
Settings stay in this browser's local extension storage. They are not synced anywhere, by us or by your browser.
You can erase all of it at any time by removing the extension, which deletes its storage.
3. What leaves your browser, and to whom
Xoot has no backend. There is no Xoot server, no analytics endpoint, no account system, and no telemetry of any kind. Every request below goes from your browser straight to a third party; we never receive a copy, because there is nowhere for a copy to go.
Market and token data — token addresses, tickers, and chain identifiers are sent so prices, charts, and token details can be returned:
- Dexscreener (
api.dexscreener.com, andcdn.dexscreener.comor the token's own image host for logos) — prices, liquidity, volume, pairs, images - Jupiter (
lite-api.jup.ag) — Solana token search, prices, balances, routing - LI.FI (
li.quest) — EVM prices and routing - GeckoTerminal (
api.geckoterminal.com) — the price chart
Blockchain reads — your public wallet address is sent to read balances, token decimals, allowances, and to confirm a transaction:
- Public RPC nodes:
*.publicnode.com,api.mainnet.abs.xyz,rpc.mainnet.chain.robinhood.com
Building a trade — when you request a quote, your public wallet address is sent to the router (Jupiter or LI.FI) because a signable transaction must be addressed to you. No key material is involved.
Safety screening — when a token is screened, its contract address (not your address) is sent to GoPlus (api.gopluslabs.io).
Each of these services has its own privacy policy and its own logging practices, which are outside our control.
4. What we do not do
- No analytics, of any kind. No SDK, no tracking pixels, no advertising identifiers, no install or usage counting. The extension makes no request to any server operated by us, because none exists.
- No accounts. There is no sign-up, no email, no password.
- No selling or sharing of data. We hold none to sell.
- No advertising.
- No browsing history collection. Xoot only runs on
x.comandtwitter.com, and only reads post text to detect token addresses and tickers so it can show a card. It does not read, store, or transmit your posts, messages, timeline, or account.
5. Where Xoot runs
Xoot's content script is restricted to x.com and twitter.com. It does not run on any other website.
6. Children
Xoot is not directed to children and is not intended for anyone under 18.
7. Changes
If this policy changes materially, the updated version will be published here with a new "Last updated" date, and the extension listing will reflect it.
8. Contact
Questions about this policy: message us on 𝕏 — the link is in the site header.