Privacy policy

Updated October 19, 2026

Banger (banger.to) is an X post queue operated by Kitze. This page lists what Banger stores, why, and who processes it. Questions and requests: [email protected].

X account

Sign in with X requests the scopes users.read, users.email, tweet.read and offline.access. We receive your X user ID, username, display name, profile image and, when X provides it, your email.
Connect X for publishing requests tweet.read, tweet.write, users.read and offline.access.
Posting tokens are encrypted with AES-GCM before they are stored and are never sent to your browser.
What we read: your own recent posts and their public metrics (likes, replies, reposts, quotes, impressions), to space the queue after your latest post and to show draft analysis history.
What we post: only the posts, threads, replies and quotes you add to the queue. Banger does not like, follow, DM or post anything else.
You can revoke access anytime in X → Settings → Connected apps.

Post queue and media

Drafts, queued and published posts, their order, timing settings and the IDs of published posts are stored in our database (Convex).
Media uploads go to a private Cloudflare R2 bucket and are sent to X at publish time. The composer does not offer media uploads yet.
API usage per account (operation, time, cost estimate) is logged; detailed request logs are kept for 90 days, daily totals longer.

Draft analysis

When you click Analyze draft, the draft text, its reply/quote context and your category/product names are sent to an AI evaluation model through the Vercel AI Gateway. Results and your corrections are cached per account (up to 200). Analysis only runs when you request it and never edits or posts anything.

Analytics and error reports

Banger uses a self-hosted PostHog instance for product analytics and error tracking: page views, clicks, the pricing and checkout funnel, and errors. Signed-in events are linked to your account ID, name and email. PostHog stores an identifier in your browser (cookie/local storage).

Billing

Payments are handled by Polar (polar.sh) as merchant of record. Polar collects your payment details, billing address and tax information; Banger never sees your card. We receive your plan, subscription status, order amount and Polar customer ID to unlock paid limits.

Referrals

If you arrive through an affiliate link, the Affonso script sets an affonso_referral cookie for 60 days. We attach that referral ID to your checkout so the affiliate can be credited. A ph_affiliate_ref cookie and local storage entry keep the referral for analytics.

Sessions and password login

Session cookies keep you signed in. If you add password login in Settings, we store your email and a password hash, never the password itself.

Sharing, retention and deletion

We do not sell your data. Processors: Convex, Cloudflare, PostHog (self-hosted), Polar, Vercel AI Gateway, Affonso, X.
Data is kept while your account exists.
To export or delete your data, email [email protected] from your account email or message @thekitze on X. Revoking X access alone does not delete stored data.