Privacy Policy

Last updated: May 2026

Crazy Pigeon is a Chrome extension that automates engagement and posting on X (formerly Twitter) on your behalf, using AI to draft comments, replies, and tweets that match a persona you define. This policy explains what data the extension handles and how.

Data stored locally

All extension data is stored on your device using the browser's built-in IndexedDB storage. This includes:

• Your persona definition (voice, topics, style, handle)
• Queued tweets, drafted comments, and pending approvals
• Engagement history (which posts the agent has interacted with, for dedup)
• Your settings (permissions, timing, content filters, schedule)
• Your Gemini API key
• Run logs and the live activity feed

None of this data is transmitted to us or any third party. It stays in your browser and you can delete it at any time by removing the extension.

Third-party API usage

The extension sends data to the Google Gemini API (generativelanguage.googleapis.com) to draft comments, replies, and tweets. This includes:

• Your persona block (voice, topics, style)
• The text of the post being engaged with, and limited thread context
• The image attached to a post, when one is present and relevant to the decision
• Your content filter topics (so Gemini knows what to skip)

These requests are made using your own Gemini API key, which you provide in the Settings tab. The extension never stores, proxies, or relays your API key through any server other than Google's.

Google's handling of data sent to the Gemini API is governed by Google's Gemini API Terms of Service.

X (Twitter) interaction

The extension opens X pages in browser tabs and reads tweets, replies, and notifications from the page DOM. It also writes to the page (typing into the composer and clicking buttons) to post on your behalf. It behaves like a regular browser tab signed in as you — no hidden requests, no API exploitation, no credential access. The extension does not access your X login credentials, your X password, or your direct messages.

Data we collect

None. The extension has no server, no analytics, no telemetry, no tracking. We do not collect, store, or transmit any user data.

Permissions explained

• storage / unlimitedStorage — save your persona, queue, engagements, settings, and logs locally in IndexedDB
• tabs / tabGroups — open and manage the X tabs used during a session (feed, notifications, posting), and group them so they don't clutter your workspace
• scripting — inject content scripts into X pages to read posts and to type and click on your behalf
• sidePanel — display the extension's UI as a Chrome side panel
• alarms — schedule the periodic notifications check and the scheduled-tweet posting tick
• notifications — alert you when the agent needs attention (e.g. you've been logged out of X, or a verification challenge appeared)
• contextMenus — add a right-click "Draft reply with Crazy Pigeon" entry on tweet links
• Host permissions (x.com, twitter.com, twimg.com) — required to interact with X pages and load tweet media
• generativelanguage.googleapis.com — Google's Gemini API endpoint used for AI generation

Your control

The extension only acts while you have a session running. You can stop it at any time from the side panel. Each action can be set to Auto (the agent acts immediately), Approval (it queues a draft for your review), or Paused (it never does that action). Rejected drafts and manual skip lists are honored across sessions.

Changes to this policy

If this policy changes, the updated version will be published with the extension update. The "last updated" date at the top will reflect the change.

Contact

Questions or concerns? Reach out on X (@tsvtxt) or LinkedIn.