Your browser.
Your data.
XpandMax’s follower-count extension processes information locally. It does not send the account data it reads to us or to third parties.
Last updated: October 11, 2026
The extension
XpandMax runs only on https://x.com/* and https://twitter.com/*. It observes the same-origin GraphQL responses already loaded by the page, extracts account handles and follower counts, and reads account-name elements so it can display the matching labels.
Counts are kept only in the current tab’s memory, with a limit of 5,000 accounts and a 30-minute freshness window. They are cleared when you refresh or close the tab. A missing count does not mean zero followers.
What we do not collect
- No cookies, passwords, or request authorization headers are read by the extension.
- No extra account API requests are made.
- No page responses or follower counts are stored on a server or written to browser storage.
- No analytics, advertising SDKs, or remotely loaded code are included in the extension.
- No follow, like, post, or direct-message actions are performed.
Site access
Chrome may describe the extension’s access as reading and changing data on X. This is needed to match account information and insert labels. The extension does not request cookie, history, download, storage, or all-sites access.
Page-to-extension messages are used only to display counts. X can affect the underlying data and page structure, so the labels are a browsing aid, not an identity-verification or audit service.
This website
This website has no account system, contact form, analytics scripts, or advertising cookies. It is hosted on Vercel, which processes standard request information, such as IP address, browser information, and access time, to serve and secure the site. This hosting is separate from the extension’s local operation.
External links, including links to X, are covered by the destination’s policies. Visiting this website is not required for the extension to function after installation.
Questions or feedback
Contact Yiren on X. Please remove private messages, credentials, and other personal information from any screenshots or reports.