Privacy Policy

Last updated: 2026-11-05

This policy describes DONO Studio Content Poster, a website where a creator logs in with their own TikTok account and publishes a video they choose. Contact: donostudio.contact@gmail.com.

TikTok products and scopes

DONO Studio Content Poster uses TikTok Login Kit and the TikTok Content Posting API.

• user.info.basic (Login Kit). When you log in, TikTok shares your open ID, display name, and avatar so the site can show which account is connected. The post page also loads your creator nickname from TikTok so you can see where the video will go.
• video.publish (Content Posting API). When you press Post to TikTok, this permission lets us publish the video, caption, privacy setting, interaction settings, and commercial-disclosure choices you made on the page. We send those only after you press the button.
• video.upload (Content Posting API). The TikTok app is also registered for this scope, which can place a video in a creator's TikTok inbox. This website does not request video.upload when you log in. Publishing on this site uses video.publish.
• We do not request video.list. We cannot read the videos already on your TikTok profile.

Data we store

• Your TikTok open ID, display name, and avatar URL.
• The access token and refresh token TikTok issues for the scopes you approved, so we can load your posting settings and publish when you ask.
• A login session cookie, so you stay signed in on this site.
• Bookkeeping for a publish you start: the TikTok publish id, file size, and upload progress. We delete the temporary upload address when the upload finishes, and we delete the rest when you disconnect.

The video file is transferred to TikTok and is not kept by DONO Studio Content Poster. We do not add a watermark, logo, or other branding to your video.

How we use it

We use this data to run the site for you: to show your nickname, to offer only the privacy and interaction options TikTok returns for your account, and to publish a video you expressly submit. We do not sell your data or use it for advertising.

Retention and deletion

We keep the connection until you disconnect. Disconnect TikTok on the post page, or email us, and we delete the TikTok tokens and account data we store. You can also remove DONO Studio Content Poster in TikTok under Settings, Security and permissions, Apps.

Security

Tokens are stored in Google Cloud Firestore and are readable only by our server. The TikTok client secret is stored as a server secret and is not included in the website. Traffic is encrypted in transit.