Data Report Card · X
X Data Report Card
X · formerly Twitter
§ Enforcement action
Data
Practices
Practices
2Access2Portability2Friction1Deletion0Sells0Trains AI
=
D
§
5/12
Agent
Readiness
Readiness
2Access
2Portability
1API access
=
B
5/6
Agent Readiness is a derived signal — a synthesis of two existing cells (Access, Portability) plus one sourced factor (API access), not an independently measured grade. API access scale: Best (2) consumer-grantable API · Moderate (1) partial / encumbered · Restrictive (0) manual export only. What is Agent Readiness?
§ This grade reflects a 2-point deduction (severity 1) for a verified regulatory action: 7/12 on data practices − 2 = 5/12 → D. The enforcement record is below.
Reviewed Jun 2026 · policies are checked weekly for changes · stated — every cell is read from X's published policy; none has been tested (run by us) yet.
2Accessstated
Free self-serve archive covering tweets, DMs, media, followers, lists and ad data via Settings → Your account → Download an archive of your data.
X Help — Accessing your X data · accessed Jun 2026 ↗2Portabilitystated
Archive is a ZIP containing an HTML index plus per-section
X Help — Accessing your X data · accessed Jun 2026 ↗.js / JSON data files (tweets, DMs, ad data, etc.), machine-readable.2Frictionstated
Self-serve request typically ready in 24–48 hours (occasionally a few days for very active accounts); download link expires after 7 days.
X Help — Accessing your X data · accessed Jun 2026 ↗1Deletionstated
Deletion is a two-step deactivation followed by a 30-day grace period; if you don't log in during that window the account is permanently deleted, though X retains some data per policy.
X Privacy Policy (Jan 2026) · accessed Jun 2026 ↗0Sells / sharesstated
X shares data with advertisers and "third-party collaborators" for cross-context behavioral advertising; GPC honoring is not clearly affirmed in policy and applies only to the California ad pixel.
X Privacy Policy (Jan 2026) · accessed Jun 2026 ↗0Trains AIstated
Public posts and Grok interactions are used by default to train xAI's Grok for non-EU users; an opt-out exists (Settings → Privacy & Safety → Data sharing) but training is opt-out, not opt-in.
xAI Privacy Policy · accessed Jun 2026 ↗§Enforcement action — deducts 2 points (severity 1); data practices without the penalty scored C (7/12)verified
The FTC and DOJ fined Twitter (now X) $150 million in May 2022 for using phone numbers and email addresses collected for account security to target advertising.
US Federal Trade Commission · 25 May 2022 ↗1API access — feeds Agent Readiness, not the /12stated
X's API v2 supports OAuth 2.0 with refresh tokens to read your own posts and profile, but read access is paid: the API runs on credit-based pay-per-usage pricing with no usable free read tier.
X — About the X API · accessed Jun 2026 ↗X offers an excellent free, fast, machine-readable archive but its broad ad-sharing and opt-out-by-default Grok training pull the privacy dimensions down. Source-verified Jun 2026; all cells stated (read from published policy/support docs), none yet tested via live export.
How to request your data from X
- Go to https://x.com/settings/download_your_data — X's data-request entry point.
- Sign in → confirm your password → Request archive (your posts and account data).
- Expected wait: usually 24–48 hours (link expires after 7 days) — X's stated turnaround (we haven't independently timed a request yet).
- No self-serve option, or want a formal request? Contact X — Privacy: https://privacy.x.com/en.
These steps reflect X's documented process as of Jun 2026. The wait time is the company's stated figure, not yet independently measured by us.