Legal
Privacy Policy
How the operator of XDownload.cloud handles information when you use this site.
Section 1
What is processed
Your browser sends standard request information, such as your IP address and user-agent, with every request. The site uses only the IP address, to apply rate limits and respond to abuse. IP addresses used for rate limiting are held only in server memory and are never written to disk.
Section 2
The link you paste
The X link you paste is sent to X servers only to look up public media. The extraction result is kept in server memory for up to 8 minutes so the download buttons can reuse it. Each download button carries a signed token that contains the link and expires after 10 minutes. Media is written to a private temporary directory only while a download is running and is deleted immediately afterwards.
Section 3
What is never collected
There are no accounts and no X login. Download history is not stored. The operator does not sell personal data.
Section 4
Legal basis
Where the GDPR or the UK GDPR applies, the processing described here is based on legitimate interests under Article 6(1)(f): running the tools you ask for, keeping the service available, preventing abuse.
Section 5
Logs and retention
Each request produces one structured log line containing a request id, the path with any download token removed, the status, the duration, and a truncated hash of the client IP. When you paste a link, the line also holds a truncated hash of that link and the detected media type. Raw IPs, URLs, query strings, and tokens are never logged. Log lines are deleted automatically after 14 days.
Section 6
Cookies
This site does not use analytics or tracking cookies.
Section 7
Third parties
Requests are made to X servers on your behalf, and those requests are subject to their own policies. This site does not use analytics or tracking cookies.
Section 8
Children
The site is not intended for anyone under 16. It does not knowingly process information about children beyond the technical request data described above.
Section 9
Your rights and contact
Depending on where you live, including the EU, the EEA, and the UK, you may have the right to access, correct, or erase your personal data and to restrict or object to its processing. You may also complain to your local data protection authority. Logs hold only hashed identifiers and are deleted after 14 days, so the operator usually cannot link a log line to you. Send privacy requests to [email protected].