Recognition creates a private invitation.

Recognised activity on X can cause a place to be held for an account. That held place is private.

It is not an account, a profile, a signup or a membership, and it is never listed publicly. Status is only ever shown to the person who asks about their own handle.

When you sign in with X, trusted server code matches your stable numeric account ID against held invitations.

Handles and display names change, so they are never used to grant access.

Two sources: a snapshot of followers, and a record of qualifying interactions.

They exist for one purpose, which is to establish who already has a relationship worth inviting.

Nothing about you is publicly visible by default.

Visibility inside the network and publication outside it are two separate, explicit, versioned consents. You can withdraw either at any time.

Held invitations expire and are purged on a schedule rather than kept indefinitely.

You can request an export of your own data, and request deletion or anonymisation of your account, at any time.

Administrators can see the operational records needed to run claims, reviews and moderation. They do not browse member data for any other reason.

Privileged actions are written to an append-only audit history.

Where payments are enabled, transaction and ledger records are retained for the period required for accounting.

Card details are never stored by us; payment processing is handled by the payment provider.