The extension sends nothing to us or to any third party. The only pages it touches are the x.com pages it opens in your own tab.
Nothing. There are no accounts, no analytics, and no tracking scripts.
unfollowfa.st is a plain static page on a server we run. Access logging for this site is switched off, so there is no record of your visit. The page loads no third-party scripts, fonts, images, or trackers.
When you scan, the list you see is held in the dashboard page's memory only and is never stored. When you press start, the accounts you selected are written to your browser's local storage only while that run is in progress, so the record survives the page navigations the run itself performs to reach each profile. It is cleared the moment the run finishes, when you stop it, when you close the x.com tab it is running in, or the next time you start the browser. We deliberately do not show profile pictures, because loading them would tell X's servers that you are using this tool.
The extension reads the following list on your own x.com pages and clicks unfollow buttons when you tell it to. It never reads your messages, your timeline, or your password, and it does not post, reply, like, or follow.
Your protected handles and your unfollow count are stored in your browser through Chrome's local storage. They stay on your computer and are removed if you uninstall the extension. Because they are per browser profile, a second Chrome profile has its own separate count.
The extension works inside your already logged-in browser. It never reads, copies, or transmits your session cookies.
Questions go to @israfill on X.