BlueFox Hi, maintainer of QuaX here. In these apps, every request made to X is authenticated with one of the accounts you're authenticated with in the app. One account is selected randomly for each request.
An account is unfortunately required, otherwise X returns 404 on each request.
Requests sent by QuaX or Squawker are similar to requests when you browse X on a web browser. But they both send less requests, never send trackers and don't store cookies (except connection cookies).
X does know:
- What you search.
- Which post you open (including articles)
- Which account you browse
- Your language, if you use the translation feature to translate a post
- Could deduce your subscriptions (see below)
What X cannot know:
- Which posts you saved (purely local to the app)
- Tracker id of an x.com link you opened in the app
- The time you spend reading a post (or any other telemetry)
- What post you share
- Who you share posts with (there is no tracker added to shared links)
X doesn't know directly your subscriptions in QuaX/Squawker because they are not linked to the followings of your real account. However they could deduce them by analyzing the requests you make when you refresh your feed. In those apps, subscriptions posts are fetched using a "search tweets" request using special keywords to filter the search results on the people you follow (like "from: @elonmusk" if you follow Musk).
It is recommended to login QuaX using one or several dummy accounts that never posted anything, because you don't need a "real" account to use it.
I don't know how well QuaX works over TOR. If you try, your feedback would be much welcomed.