Privacy policy
Last updated November 12, 2026.
Who we are
ReachGrade is operated by Jun Yu, a sole proprietor (@JunYu_0127 on X). Contact: support@reachgrade.com. ReachGrade is not affiliated with X Corp.
What we process, and why
| Data | Where it comes from | Why | How long we keep it |
|---|---|---|---|
| Public X profile and public posts of your own account, after you sign in with X or mention @reachgrade yourself (profile fields, post text, public metrics, X's 7-day post counts; for the paid report, public replies under your recent posts) | X API, read-only | To compute the score and report | Free scores and the posts behind them: until the end of the UTC day, then deleted automatically (within minutes of 00:00 UTC). If you buy the full report the same day, it reuses the posts your free score already read instead of reading them again; that doesn't keep them any longer. Paid reports: kept so you can reopen the report you bought, but without any post text — only post IDs, public metrics and links to the posts on X. Deleted when you opt out or ask us, and deleted when an order is refunded. |
| Your X user ID, handle and name, when you sign in with X | Sign in with X (read-only scopes) | To score only your own account, and to prove an account is yours before a full report or an opt-out | In a signed browser cookie for up to 7 days. We don't keep your X access token. |
| Your language choice (en or ja) | You, when you use the language switch | To show the site in the same language next time | In a browser cookie (rg_lang) for up to 1 year. It holds only the language code. |
| Order record: order ID, X user ID, handle, Paddle transaction ID, amount, status | You and Paddle | To unlock the report you paid for, handle refunds, and keep accounting records | As long as tax law requires |
| Mentions of @reachgrade and our replies | X API | To answer “grade me” once and to honour “stop” | Our reply text and your handle: until the end of the UTC day. The mention's post ID and your X user ID: 90 days, so we never answer the same post twice, then deleted. |
| Share links you create: your handle, display name, score, content style, biggest issue and next step (no posts) | You, when you press “Share on X” | To show your score card to people you share the link with | Until you press “Stop sharing” or opt out, and at most 30 days. Your score is private until you share it. |
| A daily counter of fresh scores per X account | Our server | To limit each account to one fresh score per UTC day | Until the end of the UTC day |
| Your “Don't grade me” request | You | To refuse future grading | Until you ask us to remove it |
| IP address (or, for IPv6, its network prefix) | Your browser's connection | Only for rate limiting, so one visitor can't run up our X API bill | Deleted within 48 hours. Never linked to a handle, an order or analytics. |
| Backups of our database | Fly.io | To recover from a failure | Automatic daily snapshots are kept for 7 days. Manual backups, made only for maintenance, are deleted after 7 days at most. Anything deleted from the live database is gone from all backups within 7 days. |
Analytics
We measure how the site is used so we can improve it. None of these tools sets cookies or similar identifiers in your browser, none of them fingerprints you across sites, and we don't use them for advertising.
- Umami (Umami Software, Inc.), cookieless web analytics hosted in the EU. It records page views and a few clicks (for example “Get my score” and “Post it on X”) with the page address, referrer, browser, device type and country. Your IP address is used only to work out your country and is not stored.
- Cloudflare Web Analytics (Cloudflare, Inc.), a cookieless page-view counter that we use to check our totals. It records the page, referrer, browser, country and page-load times, without storing your IP address.
- Our own event counts. Our server keeps daily totals of steps such as “score run”, “signed in”, “checkout opened” and “purchase”, together with the campaign tag of the link you arrived from (for example
utm_campaign=share). These are counts only: they hold no IP address, handle, X user ID or cookie, and they can't be linked back to you.
Our legal basis is our legitimate interest in understanding, in aggregate, how people find and use ReachGrade. Blocking these scripts doesn't affect the service.
We don't infer or store health, political views, race or ethnicity, religion, sex life or sexual orientation, and we don't build follower profiles. The score and the short “content style” line describe how an account posts (for example, mostly replies), never the person behind it. We don't sell personal data and we don't use it for advertising.
To tune our scoring thresholds we sometimes run the checks over a sample of public accounts. We keep only the combined figures (such as medians and percentiles) and delete the per-account results as soon as they are computed.
Legal basis (EU/UK)
Paid reports and sign-in: performance of a contract with you. Free scores: performance of the service you ask for when you sign in and request your own score (or mention @reachgrade yourself). Sample-based calibration: our legitimate interest, limited to aggregate figures.
Who else processes it
- X Corp. — the X API we read public data from, and Sign in with X.
- xAI (X.AI LLC, the company behind Grok) — writes the bios, pinned post and plan in paid reports, and only after you tick the consent box at checkout. We send your public profile, a summary of the checks and up to five of your recent public posts. Under xAI's business terms for its API, xAI doesn't use this content to train its models, and it deletes requests and responses within 30 days unless it has to keep them longer to investigate abuse or meet a legal obligation. Free scores never use xAI.
- Paddle.com — our online reseller and the Merchant of Record for all our orders. Paddle handles checkout, card data, taxes, receipts, payment questions and refunds. We never see your card details.
- Umami Software, Inc. — cookieless, EU-hosted website analytics (see Analytics above).
- Cloudflare, Inc. — DNS, CDN and security proxy. Every request to our site passes through Cloudflare, which processes your IP address and browser details to deliver and protect the site. We also use its cookieless Web Analytics.
- Fly.io, Inc. — runs our servers and database in the United States (Virginia).
International transfers
Our servers and database are in the United States. If you use ReachGrade from outside the United States, your information is processed in the United States. Some of the processors named above also handle data in other countries as needed to provide their services. Those countries may not offer the same legal protections for personal data as your own. We only transfer data as needed to operate ReachGrade and to complete a purchase you ask for.
Age
You must be 18 or older to buy a report. To use the free score you must be old enough to use X under its rules. ReachGrade is not directed at children under 13, and we don't knowingly collect personal information from them. If you believe we have, email us and we will delete it.
Your rights
You can ask for a copy of your data, a correction or deletion. You can opt out of grading on the Don't grade me page or by replying “stop” to @reachgrade. That deletes saved results and reports for your handle at once; copies in backups are gone within 7 days. Email us for anything else. We answer within 48 hours and finish deletions within 24 hours of confirming it's your account. California residents: we don't sell or share personal information as defined by the CCPA/CPRA, and you won't be treated differently for using these rights. You can also complain to your local data protection authority.
Changes
We'll post changes here and update the date above.