Privacy policy

What we store

• Your checkout email — collected by Stripe for billing and recorded by Trust Cue as an unverified recovery address. To restore access on another browser, you must prove control of that mailbox with a one-time code. The email alone is never accepted as a credential.
• Checkout intent — the chosen product, the X handle you asked about, and whether payment completed. Your purchase is tied back to the browser you bought from using a short-lived, single-use token; the token itself never leaves your extension, and we cannot read it from what we store.
• Your checks and ratings history — which accounts you've checked, your remaining checks, your purchase records, and any rating links you've shared or turned off.
• Your answers to “Do the posts back this up?” — kept with your account, because readers' answers decide which kinds of finding Trust Cue shows publicly. When you answer "Partly" or "No", we also keep the finding you judged and the account's handle for 30 days so we can look into it; after that only your answer remains. A "This looks wrong" report is kept with your account the same way. Both are exported and deleted with your account.
• On your device — your sign-in session, settings, theme, muted accounts, recently opened ratings ("My reads") and a dated cue for each account you checked, for 30 days, stay in the browser's own extension storage, so the panel can re-open a saved rating without sending anything to us. Once a saved rating expires, the posts it quoted are removed from your device; the rest of the rating stays until it drops out of My reads.

What we never read or do

• We never access your private X session, your DMs, or anything behind your login. What we read is the rated account's recent public posts. We may also open a public link from that account's profile to check an identity or credential claim.
• We never post, like, follow, or act as you — on X or anywhere else.
• We never sell your data.
• We run no third-party advertising code unless you switch it on. One is available — X's advertising measurement tag — and it stays off until you press "Allow". See Advertising measurement for exactly what it does and what it is never given.
• We never put advertising or analytics code inside the browser extension. The extension contains no third-party JavaScript at all, and nothing on this page's advertising section applies to it.

If your account has been rated

This section is for the people whose X accounts Trust Cue rates, who are not our customers and never gave us their details. You are entitled to know what happens.

• What we read. Only public material: your public profile, a bounded sample of your public posts and replies (never reposts), and — when a reader checked you from one of your posts — that post. We may open a public link from your profile to check a claim it makes. We never try to work out who you are beyond what your account says about itself.
• Why. So a reader deciding whether to cite, share or act on something you posted can see what your own public posts show, with every statement linked to the posts behind it. Our legal basis is legitimate interests; the safeguards below are what that basis depends on.
• What we never do. We never infer your health, politics, religion, ethnicity, sexuality, finances, union membership or anything about crimes. We never keep a running file on you: each check is a single rating, and it is not added to later ones.
• What a rating keeps. Which of your public posts it rests on, never their words. The words are read from X each time a rating is shown and kept for at most 12 hours, so a post you delete or edit on X drops out of it.
• How long. A rating lives up to 7 days, or until the account posts again and a reader updates it. It is then deleted, and it ends sooner once you have posted a good deal since it was made. The raw posts we read to make it are kept for at most 24 hours. A reader's own device keeps a copy of a rating they opened, without any of your posts once it expires.
• Who sees it. The reader who asked, and anyone they share its link with while it lives; they can turn the link off. Anyone else — a public page, a share preview, a hover preview — sees only a preview: who the account is, what was read and when, the measured facts, the topics, and only the kinds of finding readers have confirmed. A few ratings are published as dated samples of how a rating reads. We never sell ratings or your data, and the processing service that helps write a rating is not allowed to use it to improve its own products.
• Your rights. You can ask what we hold about your account, ask us to correct or delete it, or object to being rated at all. Every rating links to “Is this your account?”: sign in with X to prove the account is yours, and an objection takes effect at once; X's sign-in is used once to confirm who signed in and is never stored. The same page lets you ask for a fresh check after you have posted since. You can also email [email protected] from anywhere and tell us your handle. If you object, we stop rating your account — no new checks, no paid ratings — and delete any stored rating, share link and sample, within one month and usually much sooner. You can also complain to your data-protection authority.

Payments

Card details and the checkout email go directly to Stripe, our payment processor, through Stripe's own checkout — Trust Cue never sees or stores your card number. We keep the email and purchase records needed to maintain your subscription, checks balance, recovery, and history.

Usage stats

The site sends cookieless usage measurements with analytics and advertising storage denied. They contain the page path, permitted campaign tags, and standard browser and device signals, but never the content you read, checkout details, email, or anything you type.

The Chrome extension contains no analytics code and sends no optional interaction events. Firefox sends those events only if you grant its optional analytics permission. The server records a small set of successful rating, checkout, purchase, restore, and renewal events for both browsers. Pseudonymous identifiers connect steps in the same journey; the events never include rated handles, posts, evidence, email, payment identifiers, or free-form text.

Separately, if you allow X's advertising measurement, that tag does set cookies. It is the only thing on this site that does, and it is described in full below.

Advertising measurement

We run ads on X, and X can only tell whether an ad worked if something on our side reports back. That reporting is X's advertising tag, and it is the only advertising code on this site. It is off until you press "Allow". If you press "No thanks", the tag is never loaded, no request is made to X, no cookie is set, and we do not ask you again. Ignoring the question leaves it off.

Your answer is stored in this browser's own local storage, not in a cookie. It is readable only by this site, and clearing your site data clears it — which will make us ask once more.

What it does when you allow it

• It reports that a visit happened, and whether you went on to a browser store to install Trust Cue.
• It sets X's own cookies and can connect the visit to your X account if you have one.
• It lets us see how many installs an ad produced, and lets X show our ads to people who have visited.

What it is never given

• Never the account you looked up. If you arrive on a shared rating page, the handle being rated is not passed to the tag, and neither is anything from the rating itself — not a finding, not a quote.
• Never your identity with us. No email, no sign-in state, no customer or subscription record, no ratings history, no purchase.
• Never anything you type.
• Never a page it was not put on. It does not run on this privacy page, and it is never in the extension.

What X does with what it receives is governed by X's own privacy policy, not this one. If you would rather it never ran, press "No thanks" — the site works identically either way, and nothing about your ratings, your account, or what you can read here depends on that answer.

Languages and translations

Trust Cue records your language preferences so the extension, emails, checkout, and shared rating pages can show you supported copy. We also detect the language of an account's public posts before reading them. A post in a language Trust Cue doesn't read yet is marked that way rather than guessed at, and posts are never translated before they are read.

Export and delete — self-serve

From the extension's settings you can export everything we hold about you, or delete your account outright. Deletion removes your account, checks and ratings history, your answers and reports, and billing records; it takes effect immediately and is not reversible.

Questions

Email [email protected] — a person reads it. If this policy ever changes, the change is published here first.