Privacy Policy

Short version: no accounts, no uploads, and we don’t keep the posts you save.

Last updated: October 3, 2026. This policy covers x2md.de5.net, its Markdown API (/api/markdown/…) and its MCP server (/mcp). x2md is a free, open-source project; the source code shows exactly what it does.

What we don’t collect

No accounts, logins, e-mail addresses or payment details.
No uploads: PDF, EPUB, ZIP and other files are built in your browser and never sent to us.
We don’t sell or share personal data, and we don’t use advertising trackers.

Post content

When you paste a link (or an AI assistant calls the MCP server), we fetch that public X post through the open-source FxTwitter API. To keep the service fast and available, the post data is cached on Cloudflare’s edge network: the converted document for up to one hour and a fallback copy for up to seven days. Cached copies are not linked to you and expire automatically. Private, protected and deleted posts cannot be fetched at all. When you paste a profile link, we send only the account name to the Internet Archive’s CDX API to list its archived posts; the results are cached for up to 30 days and are not linked to you. To list an account’s latest posts for a ZIP download, we fetch its recent public posts through the FxTwitter API; the list is cached for up to 15 minutes and is not linked to you.

Analytics and logs

Website: Google Analytics counts anonymous page views and events (for example “PDF downloaded” or the export format) so we know which features are used. Like any page view, it sees the address of the page you open — which, on a share page such as /user/status/123, includes the post link — but not the content of the posts you save.
MCP server and API: Cloudflare request logs record technical data for each call — the post ID, document type, response size and time, and the client’s user-agent — for debugging and abuse prevention. Cloudflare also processes IP addresses to apply rate limits. Logs are kept for a limited period by Cloudflare and are not used to identify you.

Stored in your browser

Your recent links, theme and language choice are saved in your browser’s local storage only. Clear your browser data to remove them.

Third parties

Cloudflare hosts the site, API and MCP server.
FxTwitter provides public post data.
Google Analytics provides anonymous usage statistics.
Images in previews and exports load from X’s media servers (pbs.twimg.com).

Contact

Questions or removal requests: open an issue on GitHub.