XKit Pro

Privacy policy

Last updated October 6, 2026. This policy explains what xkitpro.com stores and what it sends out to run a check.

Accounts

If you sign up, we store your username, a hash of your password, your role, and the time the account was created. We do not store the password itself. A session cookie keeps you signed in on this browser.

What you submit to a tool

Usernames, emails, auth tokens, links, and 2FA secrets are used to perform the check you asked for. That can mean sending the value to X or to an email verification service. Result files may be saved on the server so a run can be downloaded. 2FA secrets are used only to calculate the current code and are not saved.

Do not paste a token, secret, or mailbox you are not allowed to check.

Contact messages

The contact form stores your name, email, message, and the time it was sent so an admin can read it.

Analytics

Pages include AFS Analytics, which may set a cookie and record the page you open, your browser, and general visit information. You can control cookies in your browser.

How long data stays

Account records stay until the account is removed. Contact messages and result files stay so the site can be operated. You can ask us to delete a contact message or account from the contact page.

Sharing

We do not sell personal information. Data is shared only as needed to run a check, host the site, or measure visits, as described above.