Privacy Policy

Last updated: March 2026 · Effective date: February 2025

1. Introduction

Looppost ("we", "our", or "us") operates looppost.xyz (the "Service"). This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal data.

By using Looppost, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

2. Data We Collect

2.1 Data from TikTok (via OAuth)

When you connect your TikTok account, we request the following scopes and receive the associated data:

ScopePurposeData stored
user.info.basicIdentify you and display your profileTikTok user ID (open_id), display name, profile picture URL
video.listFetch your published videos for analyticsVideo IDs, titles, view/like/comment/share counts (stored in snapshots)
video.uploadUpload carousel images to TikTokNot stored — used transiently during upload
video.publishPublish carousels directly to your TikTok profilePublish ID returned by TikTok (stored for status tracking)

We also store your access token and refresh token to act on your behalf. We do not store your TikTok password.

2.2 Content you provide

2.3 Analytics data

We collect daily snapshots of your video performance (views, likes, comments, shares) via the TikTok API to display growth curves in the Analytics section. This data is stored locally on our server and is never shared.

2.4 Session data

We use server-side session cookies to keep you logged in. Sessions expire after 30 days of inactivity.

3. How We Use Your Data

We do not:

4. Data Retention

Your data is retained as long as your account is active. You can request full deletion at any time — see Data Deletion.

Uploaded images are deleted from our server automatically after a post is published or cancelled. Session data expires after 30 days.

5. Third-Party Services

Looppost integrates with the TikTok API. Your use of Looppost is also governed by:

We also use Cloudflare R2 for secure image storage. Images are stored temporarily and deleted after publishing or account deletion.

We do not use any third-party analytics, advertising, or tracking services.

6. Data Deletion by TikTok

If you revoke Looppost's access from your TikTok account settings, TikTok will notify us via a server-to-server callback. Upon receiving this notification, we automatically delete all data associated with your TikTok account, including tokens, posts, analytics snapshots, and uploaded images.

7. Security

8. Your Rights

You have the right to:

9. Children's Privacy

Looppost is not directed to children under 13. We do not knowingly collect data from children under 13. If you believe we have collected data from a child, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy. We will notify users of material changes by updating the "Last updated" date. Continued use of the Service constitutes acceptance of the updated Policy.

11. Contact

For privacy-related requests: privacy@looppost.xyz

For data deletion requests: looppost.xyz/data-deletion