Nothing to hide,
because nothing is sent.

NukeKit reads and deletes your X data entirely on your own machine. Every request it makes is same-origin — it rides the session you're already logged into, exactly like x.com's own web app does. Your bookmarks, likes, posts and retweets are never sent to us or to any third party.

Backups are written straight to your Downloads folder as local files. Media archives (Pro) download the actual photos and videos to a local folder. None of it is uploaded anywhere.

If you buy NukeKit Pro, the extension sends your license key — and only your license key — with our public organization ID to Polar's public license-validation endpoint (api.polar.sh) to confirm it's real. Payment itself happens entirely on Polar's checkout; your card details never touch the extension.

The key is re-checked quietly about once a week while you're online. If you're offline, Pro keeps working — the last check stands for 7 days. No content, no account details, and no browsing data is ever included in or attached to that request.

NukeKit deliberately does NOT hold the cookies, activeTab, tabs or webRequest permissions — Chrome's cookie APIs are never used. Your session is read the way the page itself does it: two non-secret fields from x.com's own document, and every request replays same-origin from the page, where your logged-in session rides along by the browser's own rules.

The whole list: host access to x.com / twitter.com (run the cleaner on X's pages), twimg.com (download the actual media files for the Pro archive), api.polar.sh (Pro license validation — only your key is ever sent), downloads (save backups, failure logs and archives to your disk), storage (remember run progress so a reload resumes, plus your preferences), scripting & offscreen (capture the live query IDs and pack media archives). Nothing reaches beyond X and Polar.

NukeKit deletes your own content through X's private API. Deletions are irreversible — that's why backup and preview are built in. You're responsible for what you delete; always keep the backup it offers.

Automating a private API carries inherent risk if X changes its platform or rules. NukeKit is provided as-is, without warranty. It is not affiliated with, endorsed by, or connected to X Corp.