Privacy

Last updated 21 October 2026.

Tonally for X is a browser extension that suggests replies on X. It was built so that as little as possible has to leave your browser. This page says exactly what is stored, what is sent, and to whom.

Who is responsible

Nexa GmbH, Hafenstraße 25-27, 68159 Mannheim, Germany. Contact: hello@tonal.ly.

What stays in your browser

All of this is stored locally in your browser profile and is never sent to us:

• your settings and the API keys you enter for AI providers;
• your voice profiles and the rules Tonally has learned from your edits;
• reply memory: up to 300 replies you posted, each with the post it answered;
• the feedback Tonally learns from (which suggestion you used, how you edited it), kept for about 90 days;
• if you imported your posts: those posts, only until the account's voice is built from them - then they are deleted, and the voice keeps a few example lines and the statistics of the best posts;
• the X accounts you use on x.com, as X's page shows them (handle, name, picture), and the voice each one writes in;
• your license key, the date your trial started, and a random ID for this installation.

Removing the extension deletes all of it. “Reset everything” in the settings deletes everything except the license key, the trial date, the installation ID and whether Tonally has already asked you for a review.

What leaves your browser, and where it goes

The AI provider you choose

To write suggestions, your browser sends a request directly to the AI provider you configured, using your own API key. It contains the post you are replying to (its text and its author's name and handle), a few neighbouring posts of the same conversation where there are any, your voice profile, your learned rules, a few of your own earlier replies from reply memory and, if the voice was built from imported posts, a short summary of what works for that account. The same provider is used to turn your feedback into rules and, when you import posts, to describe the account's writing style from a sample of them.

These requests go from your browser to the provider. They do not pass through any server of ours, and we never see them. What the provider does with them is governed by its own terms and privacy policy.

Our license server

If you sign in with Whop, you do it on Whop's own page. Whop hands your browser a one-time code, which your browser sends to our license server together with the random installation ID. The server uses the code to ask Whop which Whop account signed in, looks up that account's Tonally purchase and sends its license key back to your browser - the same key you could also type in yourself. It keeps nothing from the sign-in and ends it at Whop right away.

Once your browser has the license key, it sends that key and the random installation ID to our license server, about once a day and when you press “Activate” or “Check again”. The server asks Whop, our payment provider, whether the key belongs to an active purchase, and answers yes or no together with the renewal date. Nothing else is sent: no posts, no replies, no account details. As with any web request, the server and the company hosting it (Cloudflare) see the IP address the request comes from. Our server does not record it.

During the free trial, before you sign in or enter a key, nothing is sent to the license server at all.

Importing your posts

Importing comes with a paid subscription, and only happens when you press “Import posts”. You sign in on X's own page; X hands your browser a one-time code, which your browser sends to our license server together with your license key. The server checks that you have an import left, uses the code to read that account's profile and up to 3,200 of its posts and replies (with their statistics) from X, sends them to your browser, and ends the access right away. It keeps none of the posts. On your Whop membership it records how many imports you have used and the ID of each X account you imported - what it needs to count your imports and the limit of 20 accounts. Your browser then takes out other people's handles (a reply's opening @mentions are removed, any other @mention becomes a placeholder), builds the account's voice with your AI provider as described above, and deletes the posts. No handle of anyone else is sent to the AI provider.

X

Your browser never calls X's API: the only contact with X is the sign-in page of an import you start (above). Which account you are signed in with on x.com is read from X's page itself, without asking X for anything.

If you turn on “Live X context” with xAI as your provider, the handle of the person you are replying to is sent to xAI so it can look at their recent posts.

When you remove Tonally

Chrome opens a goodbye page on this website. It asks, optionally, why you left. If you click one of the reasons, your browser asks our license server to note that reason - only the reason, written into the server's logs without your IP address, your license key or anything else about you. As with any web request, Cloudflare sees the IP address the click comes from; our server does not record it.

A public price list

To estimate what a reply costs, your browser downloads a public list of model prices from OpenRouter. Nothing about you or your settings is sent with that request.

Nothing else

Tonally contains no analytics, no advertising and no tracking. We do not sell or share data. We do not receive your replies, your voice profile or your API keys, and your posts only pass through our license server during an import you start - it keeps none of them.

Buying a license

Payments are handled by Whop. When you buy, Whop collects your payment details and your e-mail address under its own terms and privacy policy, and shows us who holds a license (e-mail address and purchase status) so that we can provide support and refunds. We also use that e-mail address to tell you about Tonally and its new features, now and then. You can object to that at any time, free of charge: with the unsubscribe link in every such e-mail, or by writing to hello@tonal.ly.

This website

This site is a set of static pages. It sets no cookies and loads nothing from third parties. Its only script is the demo at the top of the home page, which moves the panel and fills in the reply box on that page; it stores nothing and sends nothing. The company hosting it processes IP addresses in its server logs, as every web host does.

How the extension uses what it can access

On x.com, Tonally looks for reply boxes so it can add its button, reads the post you are replying to when you reply, and - after you inserted one of its suggestions - reads the text you actually posted, so it can learn from your edits. That information is used for one purpose, writing suggestions that sound like you. It stays in your browser, except for what is sent to the AI provider you chose as described above. It is not used for advertising, not sold, and not used to assess creditworthiness or for lending.

Your rights

Because your data is in your own browser, you can see, export and delete it there at any time (Settings → License & Advanced → Data). For anything concerning a purchase, or if you have a question about this page, write to us at hello@tonal.ly. If you are in the EU or the UK you also have the right to complain to your data protection authority.

Changes

If what Tonally stores or sends changes, this page changes with it, and so does the date at the top.