Privacy policy

Effective 25 October 2026.

Crosspost publishes posts you write to the social accounts you connect. It is operated by thegeneralist01. This page explains what data Crosspost stores, why, and how your secrets are protected.

What we store

• Your Crosspost account: your email address and a salted PBKDF2 hash of your password (never the raw password), plus a signed session cookie that keeps you authenticated.
• Connected social accounts: the handle and display name, and the credentials required to post on your behalf. Bluesky sessions use AES-256-GCM encryption. Tokens and cookies for X and Instagram are sealed with RSA-OAEP public key cryptography so only our dedicated publishing worker can open them.
• Your posts: your composed text, the attached image, and direct links to each published copy so you can verify deliveries.
• Billing: your Stripe customer identifier and subscription status. Payment card details go directly to Stripe and never touch our servers.

How we use your information

We use this data solely to provide the crossposting service: verifying credentials, dispatching posts when you hit publish, displaying delivery links, and confirming active subscription status. Crosspost never reads your social feeds, never views direct messages, serves no advertisements, and runs no third party tracking or analytics scripts.

Third party services

• Cloudflare: hosts the application, edge routing, and database.
• Stripe: securely handles subscriptions and payment transactions.
• The platforms you connect: (X, Instagram, Mastodon, Bluesky) receive posts you dispatch, governed by their respective terms and privacy policies.

Data retention and deletion

Disconnecting an account immediately and permanently purges its stored token or cookie. To request full account deletion and removal of all stored post records, email thegeneralist01@gmail.com. Posts already published to external platforms remain there until you delete them directly on each platform.

Contact

Questions or requests regarding privacy may be directed to thegeneralist01@gmail.com.