# Privacy Policy — YTDevNoll
*Last updated: August 9, 2026*
This Privacy Policy explains what data YTDevNoll (”we,” ”us”) collects through its TikTok integration and how it’s used.
## 1. What We Collect
When a TikTok account is connected via TikTok Login Kit, we receive:
– The account’s TikTok open ID (an anonymized account identifier, not the account’s actual username or personal details, unless separately granted via `user.info.basic` scope)
– Basic public profile info if the `user.info.basic` scope is granted (avatar, display name)
– An OAuth access token and refresh token, used only to authenticate future API calls to that same account
We do not collect passwords — authentication happens entirely through TikTok’s own login flow; we never see or store TikTok account credentials.
## 2. How We Use It
This data is used exclusively to:
– Authenticate the connected TikTok account for our own content-publishing workflow
– Publish video content (produced by YTDevNoll) to that same connected account via TikTok’s Content Posting API
We do not use this data for advertising, analytics profiling, or any purpose beyond operating this integration.
## 3. Storage and Security
Access and refresh tokens are stored locally on the machine running the integration, in a file that is not shared, published, or committed to any public repository. Tokens are used only to make authenticated calls to TikTok’s API.
## 4. Sharing
We do not sell, rent, or share this data with third parties. Data is not transferred outside of what’s necessary to communicate with TikTok’s own API.
## 5. Retention
Tokens are retained only as long as needed to operate the integration. Revoking access from your TikTok account settings, or requesting deletion by contacting us, will remove locally stored tokens.
## 6. Your Rights
You may revoke this app’s access at any time via TikTok’s app permissions settings. You can also contact us to request deletion of any locally stored data.
## 7. Contact
Questions about this Privacy Policy, or requests to delete data, can be sent to: daniel.cederhammar@gmail.com
—
*This is a general-purpose template drafted for a small, personal content-automation project with a single connected account. It is not a substitute for legal advice — have it reviewed by a lawyer if the channel grows to handle multiple users’ data or operates in jurisdictions with specific requirements (e.g. GDPR, CCPA).*