PRIVACY

Enough data to run
the loop. No more.

XBoost uses account, listing, and short-lived attribution data to operate the service and reduce leaderboard abuse.

Account data

Firebase Authentication handles sign-in. Depending on the provider you choose, XBoost receives a provider user ID, display name, and possibly an email address. We do not receive your X password.

Listing data

We store the product details you submit, your account ID as listing owner, traffic totals, and operational timestamps. Public listing fields appear on the site.

Traffic attribution

Your browser stores a random visitor identifier. For qualification and deduplication, the server combines it with request signals and a private salt, then stores only a one-way hash with timing and source data. XBoost application code does not store the raw IP address in its database.

Service providers and retention

Firebase stores authentication and database records, and Vercel hosts and delivers the site. Short-lived deduplication records are designed to expire after the ranking window; aggregate listing totals remain while a listing is active.

Your choices

You may browse without signing in. Sign-in is required only to create and own a listing. Blocking local storage can prevent a visit from qualifying. Account and listing deletion requests will be supported through the site operator.