Privacy policy

Last updated November 1, 2026

FollowOn keeps as little about you as it can and still send you the email. This page lists all of it.

What we store

• Your email address, to sign you in and send your digest.
• Your settings: the X accounts you watch, the hour and time zone for your email, and whether you joined the Pro waiting list.
• Follows we found for the accounts you watch: the public handle, name, bio and follower count of the new account. These are deleted after 30 days.
• Sign-in records: one-time sign-in links (deleted after two days) and your session, stored as a hash. When you ask for a sign-in link we keep the IP address with it for two days to stop abuse.
• A log of emails sent: when, what kind, and how many follows were in it.

What we don't do

• No analytics, ad trackers or tracking pixels on the site or in our emails.
• We don't sell or rent your data, and we don't share your watch list with anyone.
• We don't ask for your X account or password.

Cookies

One cookie, fo_s, keeps you signed in. It is set only after you click a sign-in link and expires after 60 days or when you sign out. The sign-in page uses Cloudflare Turnstile to block bots; it may set its own short-lived data to do that.

Who processes the data

• Cloudflare hosts the site and the database.
• Resend delivers our emails.
• twitterapi.io fetches public X profiles and follow lists for the accounts you watch. It receives the handles, never your email address.

Your choices

• Pause or unsubscribe from emails at any time, from the dashboard or the link in every email.
• "Delete my account" on the dashboard removes your email address, settings and watch list right away.
• Ask for a copy of your data or any other request at contact@followon.social.

Changes

If this policy changes in a way that matters, we'll say so in an email before it takes effect.