Privacy policy

Last updated: 27 October 2026

This policy covers the SaveX browser extension, the SaveX and GalleryX Android apps, the key server at keys.xo.st, and sign-up on xo.st. They are made by XO.ST ("we", "us").

In short

Your saved photos, videos, library and settings stay on your own device. We never receive them.
To check your key, the apps send us only two things: the key and a random ID for your browser or phone.
When you sign up on xo.st, we keep your email address, so we can sign you in and show you your key.
We don't sell your data, don't show ads, don't use analytics or tracking in the apps, and don't share your data except as described below.

The SaveX browser extension

What it handles on your computer. On Threads, Instagram, Facebook, X, Reddit and TikTok, SaveX reads the post information those pages already load (captions, creators' names, and the addresses of photos and videos). It uses that information to show Save buttons and to build your library. What stays in your browser, on your computer:

your library of posts you've seen;
your rules and settings;
the download queue;
a list of files already saved, so duplicates are skipped.

None of it is sent to us.

Your saved files. Photos and videos you save go into your computer's Downloads folder, downloaded directly from the sites' own servers. We never see them.

Optional image check. If you turn on the image check, it runs entirely on your computer, with a model that ships inside the extension. Images are never uploaded anywhere for it.

What is sent to us. Only for your key, and only to keys.xo.st:

When: when you enter your key, about once a day after that to renew it, and when you remove it.
What: your key, and a random ID SaveX creates for your browser. The ID says nothing about you or your computer.

The sites you save from. To save a post, SaveX loads it and downloads its files from that site's servers, much as your browser does when you view it. Those sites' own privacy policies apply to what they see.

The SaveX Android app

What it handles on your phone. When you share a post to SaveX, it opens the post in a hidden in-app browser to read it.

Logins: if you logged in to a site inside SaveX, it uses that login to read the post. Those logins (cookies) are stored only inside the SaveX app.
Saved files: they go to your phone's gallery, or encrypted into GalleryX if you use it.
Duplicate check: SaveX keeps no list of what you saved. It only keeps unreadable fingerprints (keyed hashes) to recognise files it has already saved.
No backup or transfer: none of SaveX's data goes into Android's cloud backup or along in a phone-to-phone transfer.

What is sent to us. The same as the extension, only to keys.xo.st: your key and a random ID for your phone, which SaveX shares with GalleryX so one key covers both apps on one phone.

The GalleryX Android app

What it handles on your phone. GalleryX encrypts the photos and videos you move into it, on your phone, with keys protected by your PIN and your phone's security hardware.

We can't see your photos: we have no way to read your photos, their thumbnails, names or dates.
Moving photos in: to move photos out of your phone's gallery automatically, GalleryX asks for Android's "All files access". It uses that only on the folders you choose.

Backups you choose. If you turn on cloud backup, GalleryX copies its files, still encrypted, to the DDrive server whose address you enter, or to a folder or drive you pick. Only your recovery key opens them. That server is yours to choose; we don't receive these backups.

What is sent to us. The same as SaveX, only to keys.xo.st: your key and the random ID for your phone. GalleryX's data is not included in Android's cloud backup or phone-to-phone transfers.

Your key, and the key server (keys.xo.st)

What we store for each key:

the key itself, its type (for example lifetime), and when it was made;
if it was made on xo.st, the email address of the account it was made for;
for each browser or phone it's active in, that random ID and when it first and last checked in.

What we don't store: we don't store IP addresses or any details about your device with your key.

Web server logs. Like most websites, the server keeps standard logs for security and troubleshooting: your IP address, the time, and the address requested (not your key). They are deleted automatically within about ten weeks.

Why. To check that a key is real and not revoked, and to limit how many browsers or phones a key works in at once.

How long. We keep a key's record while the key exists. Removing a key in the app or extension deletes that browser's or phone's entry at once.

Signing up on xo.st

What we collect:

Your email address, and your name if you give one, when you sign up. We use them to send you sign-in links and to show you your key.
A sign-in cookie that keeps you signed in. It isn't used for tracking.
Standard web server logs, as described above.

Emails are sent through SMTP2GO, an email delivery service, which handles your email address only to deliver them. If xo.st sends a newsletter, every one has a link to unsubscribe, and you can turn them off in your account.

How long. We keep your account until you delete it, or ask us to.

Who else is involved

We don't sell or rent personal data, and don't share it with anyone except:

SMTP2GO, to deliver sign-in emails (see above);
the companies that host our servers, which store data only on our behalf;
authorities, if the law requires it.

The social sites you save from, and any DDrive server you back up to, are your own choices, and their policies apply to them.

Chrome Web Store

The use of information received through the SaveX extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. User data is used only to provide SaveX's single purpose (saving the photos and videos you choose) and to check your key. It is never sold, never used for advertising, never used to determine creditworthiness or for lending, and never read by people except where needed for security, to comply with the law, or with your permission.

Security

Connections to keys.xo.st and xo.st are encrypted (https). Keys and licences are checked with signatures, so they can't be forged. GalleryX encrypts everything it stores on your phone.

Your choices and rights

Remove a key from a browser or phone in SaveX or GalleryX under Settings › Your key.
Delete your account and data: email us and we'll delete your xo.st account, your key and every record of it.
Access or correct your data: email us and we'll tell you what we hold about you.

Depending on where you live (for example the EU, UK, Switzerland or California), you have rights to access, correct, delete and move your personal data, and to object to how it's used. You can also complain to your data protection authority. Email us to use any of these rights; we reply within 30 days.

Children

SaveX, GalleryX and xo.st are not meant for children under 16, and we don't knowingly collect data from them.

Changes

If this policy changes, we'll update the date at the top. If a change matters, for example if the apps start sending more data, we'll say so on xo.st before it takes effect.

Contact

XO.ST · contact@xo.st