In short
Money needs to know which X account you are and where to send a payout. It also displays public profile and coin data, and does not sell personal data. Receipts name the account and link an on-chain transaction when one exists. X Money payments carry a ledger reference because they settle off chain.
Last updated 1 October 2026.
What we collect
Only what the service runs on.
- From signing in with X
- Your numeric X account id and your handle. To tell us who you are, X requires two read permissions, which its consent screen shows as reading your profile and reading posts. We use them once, at sign-in, to look up your account; we do not read or keep your posts, we never see your X password, and we cannot post for you.
- Public X profiles
- For recorded recipients, twitterapi.io supplies public account ids, handles, names, photos, banners, bios, website links, X verification status and follower counts. We cache these for display and label stale or unavailable profiles. A public profile lookup does not prove account control; sign-in with X establishes that separately.
- When you claim
- The chain and address you choose, the amount, and what happened to the payout, including its transaction.
- From the chains
- Coins that name an account, the fee claims we make and the payouts we send. This is public blockchain data, readable by anyone.
- From your connection
- Your IP address reaches our hosting providers with every request, and our payout service keeps it in memory for about a minute to limit how often it can be called. Our host tells us the country an IP address is in; the claim page uses that only to decide whether to show the stock option, and does not store it.
Cookies
Three cookies, all set by our servers and unreadable by scripts on the page. xm_pkce holds the sign-in handshake for ten minutes while you are at X. xm_session keeps you signed in, and expires an hour after you sign in. claim_error holds the reason a claim did not go through for one minute, so the claim page can tell you. There are no advertising or analytics cookies, and the site stores nothing else in your browser.
How we use it
To hold your balance under your account id, to send the payouts you ask for, to show public receipts, to prevent fraud and abuse, and to meet legal obligations such as tax reporting and sanctions screening.
What is public
Receipts show the handle paid, the amount and the rail. On-chain receipts link a recorded transaction; X Money receipts show a ledger reference with no public transaction link. Transactions on Solana and Robinhood Chain are public and permanent.
Who else handles it
Providers that run parts of the service, each only for that part: Vercel hosts this site, Railway hosts the worker and payout services, X runs sign-in, twitterapi.io supplies public X profiles, Helius supplies Solana chain reads, Solana Tracker supplies public token market data, and Kraken settles fees we claim. CoinGecko supplies asset prices. Public data providers receive the relevant public handle, account id or token address from our server, not your sign-in credentials. We disclose information when the law requires it. We do not sell personal data.
How long we keep it
Claim and payout records are kept for as long as accounting and legal obligations require. Sign-in cookies expire as described above. Records on a blockchain stay there regardless.
Your choices
You can ask what we hold about your account, ask us to correct it, or ask us to delete what we are not required to keep. You can also stop using the service at any time; an unclaimed balance stays under your account id.
The service is not meant for anyone under 18.
