xslop

What xslop sends, and what it never sends

Sent to the xslop server

• Your votes: the account's handle, slop or not slop, the reply's id, the id of the post it answers, the reply text (up to 560 characters) and its time.
• A random install id and a public key. Your browser makes the key pair and signs every vote with it. The private key never leaves your browser.
• Only if you turn on signal sharing: reply timing, text length, a short fingerprint of the text and two wording scores. Signals carry no install id.

Never sent

• Your X password, cookies or session. Mute sync and the instant mute run inside your own x.com tab and talk only to x.com.
• Your own X handle and the accounts you follow.
• Pages outside x.com. The extension runs on x.com only.
• A stored copy of your IP address. Every web request shows it to the server, but the server keeps only a salted hash of your network prefix, to spot many installs on one network.
• The text of a reply inside a signal.

This page loads nothing from other servers: no analytics, no ads, no trackers.