Small tool.
Small data surface.

What the extension accesses

The extension runs only on x.com so it can display its picture control, identify the exact composer where the user opened it, and attach the picture the user selected. Direct-message routes are excluded.

What it does not collect

• No X account identifiers, draft text, posts, timeline content, direct messages, cookies, or authentication information.
• No browsing history, clipboard content, wallet information, payment information, contacts, or precise location.
• No extension analytics, advertising identifiers, behavioral profiles, or telemetry.

Picture delivery

After the user opens the drawer, the extension requests a public picture catalog and image files from www.hoodbuybutton.com. Requests omit cookies and referrer information. The extension does not send the current X page, draft text, or account information with those requests.

Like ordinary web hosting, the hosting and security providers may temporarily process standard request information such as IP address, user agent, time, and requested file to deliver the files and prevent abuse. That information is not used by the extension for advertising or sold to third parties.

Processing and retention

Composer matching, search, integrity verification, and attachment happen in the user's browser. The extension has no account database and does not retain a record of which picture the user selected. Browser and CDN caches may retain public catalog or image files under normal cache rules.

User control

The extension never clicks Reply or Post. The selected image remains visible in the X composer for the user to review, remove, or post manually. Removing the extension stops all extension activity.

Contact

Privacy or security questions may be sent to security@hoodbuybutton.com. General troubleshooting is available on the support page.