Privacy Policy

postiny · updated 7 August 2026

Summary

postiny has one user: the person who installed it. It collects no personal data from anyone else, has no analytics, no cookies, and no tracking.

What is stored, and where

• TikTok access and refresh tokens — stored in a file on the owner's own computer (channels/<name>/.auth.json), never transmitted anywhere except to TikTok's own API endpoints.
• Basic profile info returned by the user.info.basic scope — used only to confirm the correct account is connected. Not stored beyond the local token file.
• Post content the owner wrote — captions, hashtags and rendered images, stored locally.

The application never receives or stores the owner's TikTok password. Login happens on TikTok's own pages.

Publicly accessible images

TikTok's photo-post API requires images to be fetched from a public URL. Images staged for posting are therefore served publicly under /media/ on this domain for as long as they remain staged. They contain only content the owner intends to publish on TikTok. No personal data is placed there.

Third parties

Two services are involved: TikTok, which receives the posts and handles authorisation, and Vercel, which hosts these static pages and the staged images. No data is sold, shared, or used for advertising.

Retention and deletion

The owner can delete the local token file at any time, and revoke access from TikTok's own settings, which invalidates the tokens immediately. Staged images can be deleted from the host at any time.

Children

This tool is not directed at children and has no public users.

Contact

Through the GitHub repository or the email address associated with the TikTok developer account that registered this application.