This is not “web scraping” as you’re getting the user object from the Twitter API, and that’s serving you back an HTTPS URL for retrieving the user profile photos. If you are programmatically pulling the web pages for each user and then grabbing the user images, that’s not OK, as scraping of the Twitter web UI is explicitly disallowed by the policy. Thanks.