CleanMyPosts Chrome extension security report

CleanMyPosts deletes your own posts, replies, reposts, likes and followings on X, and your comments and liked videos on YouTube — in bulk, in a tab you already have open, in the account you are signed in to. No API, no token, nothing to sign up for. WHY IT EXISTS Neither X nor YouTube will let you delete in bulk. Their interfaces remove one item at a time, each behind its own menu and its own confirmation — fine for a mistake, hopeless for ten years of posting. WHAT IT DELETES On X: • Posts • Replies • Reposts • Likes • Accounts you follow On YouTube: • Comments • Liked and disliked videos HOW IT WORKS There is no API, no OAuth and no token. The extension opens the same pages you would, finds the same menus you would, and clicks the same buttons you would — it just does not stop. You stay signed in through your normal browser session, and nothing is ever asked of you but a click on Start. That matters for two reasons. X keeps API access behind paid tiers, so deleting your own posts programmatically means paying a monthly fee for the privilege. YouTube's Data API is free but metered, and a large clean-up runs out of quota long before it runs out of comments. Driving the page costs nothing and needs no developer account. Deletion is deliberately slow. The pauses between actions are the only thing keeping the platforms from treating your session as a bot, and they are not there to be optimised away. A large account takes a while. That is the trade. WHAT IT DOES NOT DO • No account. Nothing to sign up for. • No server. There is nowhere for your data to go, because there is no "away". • No analytics, no telemetry, no crash reporting. • Nothing stored. Your posts, likes and comments are read only long enough to click them, and never written down. • No remote code. Everything it runs ships inside the extension. It runs on x.com and on Google My Activity — where YouTube keeps both the comments and the liked videos — and on no other site. BEFORE YOU START Deletion cannot be undone. There is no trash, no restore and no export: once an item is gone from X or YouTube, it is gone. Download your data from the platform first if you want to keep a copy. Start with a small list to see what it does before pointing it at ten years of posts. OPEN SOURCE Every line is public, including the selectors it clicks and the pauses it waits. If you want to know what runs in your signed-in session, you can read it — and if a platform changes its markup, you can see the fix land. https://github.com/thorstenalpers/CleanMyPosts There is also a Windows desktop app, which does the same things with settings, saved actions and an optional AI assistant that writes new ones. Same engine, same repository.