Privacy Policy

What this site is

TikStoriesViewer is a set of browser tools for public TikTok data: a story viewer, profile viewer, profile-picture saver, follower-count snapshot, and repost lookup. You do not create an account here. We never ask for a TikTok password.

What we do not collect

• No TikTok username/password of yours, session cookies, or OAuth tokens.
• No persistent search history tied to you. Lookups are request-scoped.
• No advertising profile, no sale of personal data, no cross-site tracking pixels we control.

What a lookup sends

When you search a public @username or paste a public video link, that value is sent to our server so we can fetch the matching public content and return it to your browser. The username or URL is not stored as a personal profile. It may appear briefly in operational logs used to debug failures and block abuse.

Public profile fields that TikTok already shows to strangers (nickname, bio, counts, public media URLs) are returned to you for that request. We do not build a dossier on the accounts you look up.

Abuse-protection cookie

HTML pages set a short-lived, HTTP-only cookie named tsv_req. It is a signed timestamp, not an identity. It lasts about 15 minutes and exists so the lookup APIs can tell a browser session on this site from a script hitting /api/* directly. It is not used for advertising. Blocking cookies will cause lookups to fail with a 403.

IP addresses and rate limits

We read the connecting IP (via the hosting platform's forwarding headers) to apply per-minute rate limits. Counters live in memory on a single serverless instance, or in Redis if an Upstash store is configured. They expire with the rate-limit window (about one minute). They are not a marketing database.

Third parties

Public TikTok lookups go through a server-side data provider. Your search term is sent so that provider can return public data. We do not hand them your email, because we never collected one.

Saving a public video uses a self-hosted download worker. The browser only talks to this website; the worker's address is not exposed in API responses. Hosting, DNS, and optional Redis are provided by our infrastructure vendors, who may process IPs as part of running a website.

Analytics and logs

We may use privacy-respecting, aggregate traffic stats (which pages load, error rates). Platform access logs can include IP, user-agent, path, and timestamp. Those logs are used for security and reliability, not to identify you across other websites.

Children

This site is not directed at children under 13. We do not knowingly collect personal information from children. Public TikTok accounts can belong to anyone; use the tools only on public content you have a lawful reason to view.

Your choices

Close the tab and the lookup is gone. Clear site cookies to drop the request token. Do not paste private account handles expecting a bypass — those requests fail on purpose. Questions: use the contact details listed for this project if we publish them; otherwise open an issue on the public repository that ships this site.

Changes

If this policy changes, we update the date above. Keep using the site only if the current policy is acceptable.