X (Twitter) Integration Disclosure

Why We Use X Authentication

Spaces Companion is built for X (Twitter) Spaces — live audio conversations on X. We use X's OAuth 2.0 so you can sign in with your existing X account. We never receive or store your X password. Your X user ID becomes your permanent identifier on the platform.

OAuth Permissions We Request

• users.read — Read your public X profile (handle, display name, profile picture). Required for account creation.
• tweet.read — Required by X's API for basic profile access. We only read tweets if you explicitly opt into tweet-based games, which are off by default.
• offline.access — Allows periodic profile data refresh without requiring you to re-authenticate.
• dm.read (optional) — Used only for DM-based account verification. We read only messages from our verification bot — not all your DMs.
• dm.write (optional) — Used only to send the verification code DM. We will never DM you for any other reason without your explicit request.

What We Do With X Data

Profile data (user ID, handle, display name, profile picture, follower count) is stored in our database to display your identity in rooms and on your public profile, power leaderboards, and redirect old handles to your current profile.

Tweet data is only accessed when you explicitly opt into tweet-based games in your profile settings (off by default). We do not store raw tweet text beyond the duration of the game session.

We do not access your followers list for any purpose beyond follower count. We do not read replies, likes, bookmarks, or private content.

Posting to X On Your Behalf

Spaces Companion can optionally post a "Now Playing" tweet when you enable this feature in host settings. This feature is off by default and requires both host settings enablement and platform administrator approval. We will never post to X without your explicit configuration to do so.

Revoking Access

You can revoke access at any time: X Settings → Security and account access → Apps and sessions → Connected apps → revoke "Spaces Companion." After revocation, you will no longer be able to log in with your X account. To delete your existing Spaces Companion data, email info@spacescompanion.com or use in-app account deletion.

X Developer Policy Compliance

Spaces Companion is built on X's official API and complies with the X Developer Policy. Third-party providers (GetXAPI, TwitterAPI.io) are used only for cost-efficient bulk reads of public tweet data. They access only publicly available data and are never used to access private data or authenticate on your behalf.

Changes to X Integration

If we request new OAuth scopes or change how we use X data, we will update this disclosure and may prompt you to re-authorize with the new permissions.

Contact

Questions about our X integration: info@spacescompanion.com