ShareStack Privacy Policy
Last updated: June 2026
1. What Data We Access
When you connect your TikTok account, ShareStack requests the following OAuth scopes:
user.info.basic- your display name and avatar, shown in the app UIvideo.publish- to publish a video to your TikTok account on your behalfvideo.upload- to upload video data via the TikTok Content Posting APIvideo.list- to read your published video list for status confirmation
We request only the scopes required for the publishing workflow. No other TikTok data is accessed.
2. How Your Access Token Is Stored
After you authorise ShareStack, TikTok returns an access token. That token is stored in your browser's localStorage - it never leaves your device to a ShareStack server. All TikTok API calls are made directly from your browser using that token.
Clearing your browser storage or revoking access in TikTok's settings immediately removes all stored credentials.
3. Video Storage (Temporary)
TikTok's Content Posting API requires a publicly accessible URL to fetch the video file. When you publish, ShareStack uploads your video to a temporary object storage bucket. Once TikTok has fetched the file and the upload is confirmed, the file is deleted. No video content is retained beyond the upload window.
4. Data We Do Not Collect
- We do not create user accounts or store personal profiles
- We do not use cookies, analytics, or third-party tracking
- We do not log IP addresses or browser fingerprints
- We do not sell or share data with third parties
5. TikTok's Own Privacy Policy
Your TikTok account and content remain governed by TikTok's own Privacy Policy and Terms of Service. ShareStack operates within the permissions you grant through TikTok's official OAuth flow.
6. Your Rights and Controls
- Revoke ShareStack's access at any time via TikTok - Settings - Connected apps
- Clear locally stored tokens by clearing your browser's localStorage for this site
- Request information about any data we may hold by contacting us below
7. Children's Privacy
ShareStack is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has connected an account, please contact us immediately.
8. Changes to This Policy
We may update this policy as the service evolves. The "Last updated" date above reflects the most recent revision. Continued use of the service after changes constitutes acceptance.
Contact
For privacy questions and data requests, contact us at email protected.