Privacy
Minimal by design. Precise by policy.
This page describes exactly how the CONVICTION extension and website handle data. If anything here ever changes, the date below changes too.
Last updated: October 2026
Summary
- The extension only reads crypto posts that X has already displayed in your browser.
- Post text stays in your browser. For crypto posts, CONVICTION sends a small set of fields (listed below) needed to analyse them.
- Non-crypto posts are never sent anywhere.
- No X login, no wallet connection, no third-party trackers or ads.
CONVICTION never needs and never collects
- Wallet private keys or seed phrases. Never type them anywhere CONVICTION is involved.
- Your X password, X cookies or X session tokens.
- Direct messages or any private X content.
- Your general browsing history or activity on other websites.
- A wallet connection or any signature. V1 needs none.
What the extension does in your browser
On x.com, the extension looks at posts as X renders them. For each post it checks, locally, whether the text contains a token reference (cashtag, contract address or supported token link). It also derives, locally, the direction of the claim (bullish, bearish or neutral), how clearly it is stated, and whether it looks sarcastic or promotional. Posts without a token reference are ignored and nothing about them leaves your browser.
Exactly what leaves your browser, per crypto post
| Field | Why |
|---|---|
| Post ID and author handle (public) | Deduplicate analyses, link to the public post, measure engagement over time |
| Post timestamp | Engagement per hour |
| Visible engagement counts: replies, reposts, likes, bookmarks, views | Social attention |
| Token references found locally: cashtags, contract addresses, token/pair links | Identify the token |
| Claim direction, clarity, sarcasm and promotional flags (derived locally) | Compare the claim with capital evidence |
| Whether X labels the post as an ad | Disclose paid reach |
| Token choices you make for ambiguous cashtags | Score the token you picked |
Each request also carries the extension's anonymous installation token, a random identifier created at install. It is used for daily quotas and, if you choose to link the extension to an account, to associate the two. It is stored in extension storage, not in cookies.
Post text is not sent. The one exception is when you explicitly save an analysis and choose to include a snippet of the post (up to 280 characters).
Product analytics
CONVICTION uses first-party analytics only (no third-party tracking scripts). The server accepts only these event names: landing_view, install_cta, extension_connected, post_detected, analysis_completed, analysis_failed, score_opened, watchlist_added, share_card_created, signup, checkout_started, subscription_activated. We do not record your general X browsing: a “post detected” event is a count, never a list of what you read.
Accounts
An account is optional. If you create one we store your email address, a password hash (Argon2id; we never store or log your password), session records, your plan, watchlists, saved analyses and alerts. Sessions use secure, HTTP-only cookies. Payments are handled by Stripe; CONVICTION never receives your card details.
Watchlists and wallets
Watchlists contain public token contract addresses. If wallet watchlists are ever added, they will accept public addresses only and never require a connection or signature.
Retention
- Analyses, scores and market observations are kept so results can be replayed and audited, linked to your installation or account.
- Engagement observations for a post are kept with that post's analyses.
- Security logs avoid secrets and passwords; IP addresses are stored only as salted hashes, for rate limiting and abuse prevention.
- Account data is kept while your account is active. Ask us to delete it at any time.
Your controls
- Pause: the switch in the extension popup stops all analysis immediately.
- Remove: uninstalling deletes the extension's local storage.
- Delete: email privacy@maib.io to delete your account or installation data.
Who we are
CONVICTION is built and operated by mAIb Tech. Questions: privacy@maib.io. See also the terms and risk disclosure.