Import your X follows

1 · Drop following.js

In your X archive it is at data/following.js. Optionally add account.js and tweets.js. Do not add direct-messages.js — this page refuses it by name.

2 · Matches

3 · Save

Private is the default. The list is encrypted to your own key before it leaves this page, so relays store ciphertext.

What this page can prove

• connect-src 'none' — the browser refuses any outbound request from this page.
• The archive is parsed with JSON.parse, never eval.
• Files matching direct-messages are refused before being read.
• The claimant index is bundled at build time, so matching needs no lookup.
• The saved list contains no plaintext pubkey, npub, handle or X id.