CrossposterWhat Crossposter does with your data
When you crosspost something, the extension captures the post's text and media in your browser and keeps them in your browser's local extension storage while you compose. When you're done, that's where the data stays – on your device – until it's cleaned up: your handoff history and its media are deleted automatically after 14 days. None of it is transmitted to us: Crossposter has no backend for your posts. The extension contacts our server only when you choose to send feedback or diagnostics (see below).
What Crossposter never does
- No background data collection or analytics. The extension contains no telemetry, tracking pixels, crash reporting, or usage reporting of any kind. Nothing is sent unless you choose to send feedback or diagnostics (see below).
- No credentials. Crossposter never asks for, reads, or stores your passwords or login tokens. It relies on the sessions already in your browser: if you're logged in to a platform, its own composer opens ready to use.
- No third-party services. Posts and media move directly between the social platforms and your browser. No intermediary ever sees your content.
- No automatic posting. Nothing is published without you pressing each platform's own Post button.
- No selling or sharing of data. There is no data to sell or share.
Network requests the extension makes
Crossposter talks only to the social platforms themselves, and only to do what you asked it to do: fetching a post's images or video from the platform that hosts them (for example, a platform's media CDN or public post API) so the media can be re-uploaded into the composer of another platform you chose. These requests go directly from your browser to those platforms, using your existing sessions where required. The one exception is feedback: when you press Send feedback, the extension sends that report to our server at crossposter.mochi.is.
To open X, Threads, and Bluesky with your text already in their composer, Crossposter uses each platform's own link for starting a post, which carries the text in the page's address. That platform receives your text when its tab opens, just as it can read text in its composer, even if you don't post. Like any page you visit, that address – your text included – is also saved in your browser history, where you can delete it.
Feedback and problem reports
The extension has a Send feedback link, and shows a Report this problem button when it could not fill a composer or hit another error. (Failures caused by not being signed in to a site get no report button.) Both open Crossposter's feedback form inside the extension. The details it prepares stay in your browser until you act: nothing is sent until you press Send feedback, and the form shows every detail first, with a checkbox to leave them out. Unsent details are discarded when you close the browser.
A report can contain:
- Your message. The form doesn't ask for your email address or any other contact details.
- The Crossposter version, your browser's name and version, operating system and language, and which networks you have enabled.
- For a problem: which step failed on which network and the error shown, plus the shape of the crosspost – how many characters and links, and the type and size of each media file. Never the post's text, links, or media.
- For a composer that could not be filled: an outline of that site's page structure (element names, ids, classes, roles, and test ids), so we can fix Crossposter when a site changes. Every piece of text and every label in the outline is masked to placeholder characters, links and image addresses are cut down to the site name, and form values, scripts, styles, long numbers such as user or post ids, and anything resembling a token are removed. Cookies and session ids are never read.
Reports are stored in a database on Cloudflare (our website host) in Mochi Digital's account, used only to fix problems and improve Crossposter, and deleted automatically after 180 days. Your IP address, cookies, and request headers are not stored with them. In Firefox, pressing Send with the details included also shows Firefox's own permission prompt for exactly what the report includes (technical data, and website content for the page outline); if you decline, nothing is sent, and you can untick the details to send just your message.
Browser permissions
The permissions the extension requests exist solely to provide its features: reading the post you right-click, opening and pre-filling each platform's composer, downloading media you asked for, and copying text or images to your clipboard when you use the copy buttons. None of them are used to observe your general browsing.
The website
This website (crossposter.mochi.is) uses Cloudflare Web Analytics, a privacy-first, cookie-free service that records aggregate page views without fingerprinting or tracking individual visitors. It sets no cookies. Its only server-side feature is the feedback form described above.
Changes and contact
If this policy ever changes, the updated version will be published at this address with a new date. Crossposter is open source, so you can verify everything above by reading the code. Questions or concerns are welcome through the project's issue tracker or the support links on the extension's store listings.