XBreak.Media kit

Draft — pending review. This text describes how XBreak works today and is not final.

Privacy

XBreak hosts creator media-kit pages at xbreak.com and passes sponsorship inquiries from brands to creators. This page explains what data that involves.

Creators who sign in with X

  • Signing in uses X's official OAuth. We store your X account id, handle, display name, avatar and bio.
  • With your authorization we read metrics through the official X API: follower count and impression and engagement figures for your own posts. We store numbers only; we do not store the text of your posts and we do not collect follower lists.
  • Your X access tokens are stored encrypted on our backend server and are used only to read these metrics. We never post, reply, like, follow or send messages on your behalf.
  • We store what you add yourself: links, projects, rate cards and page appearance. Stats you enter yourself are labelled "Self-reported"; only data read through the X API is labelled "Verified".
  • The dashboard uses a sign-in cookie. Only a hash of the session token is stored on our server.

Visitors to public pages

  • Public creator pages set no cookies and load no tracking scripts.
  • We count page views and link clicks as aggregated statistics: which page or link, the domain of the referring site (not the full address), and whether the request looks like a bot. We do not store IP addresses or browser user-agent strings.
  • Links on creator pages go through xbreak.com/go/… so clicks can be counted; the destination site receives no referrer from us.

Brands sending an inquiry

  • The "Work with me" form collects your email, and optionally your X handle, company, brief, budget and launch date. These are passed to the creator and to XBreak to arrange the sponsorship.
  • The form is protected by Cloudflare Turnstile. Your IP address is used briefly to limit abuse of the form and is not stored by us or included in the inquiry.
  • Contact details in an inquiry are deleted after the inquiry is closed and a retention period has passed.

Service providers

  • Cloudflare: hosting of xbreak.com, Turnstile, the inquiry queue and aggregated statistics.
  • X Corp.: sign-in with X and the X API used to read creator metrics.

Account data, tokens, inquiries and orders are stored on XBreak's own backend server and database.

Your choices

  • Creators can export their data and delete their account from the dashboard.
  • Deleting your account revokes XBreak's X access, removes your public page and links, and purges your data after 30 days. Records of completed orders keep anonymized financial fields for accounting.

Contact

Questions or requests: (reporting address coming soon).