Privacy Policy

Information we process

When you paste a TikTok link and press Download, that link is sent to our server and forwarded to a third-party resolver so we can fetch the clean download URLs. The downloader itself asks for no name, email or sign-up; the optional account described below is the only place we hold any of that.

Like virtually all web servers, our hosting provider may briefly process technical request data (such as IP address and user agent) to deliver the response and protect against abuse. We do not use this to build a profile of you.

To keep the downloader working and see how it is used, we log each download on our own server: the time, the country the request comes from (provided by our host), the type of post and file, the public ID of the TikTok video, whether it worked, and any error code. We also count page views: the page and its language, the website you came from (its domain only, such as google.com), your country and approximate city (as our host derives them from the connection; the IP address itself is not kept), whether you use a phone, tablet or computer, and its operating system family (such as Android, iOS or Windows). These records never contain your IP address or your browser's user agent.

Each record also carries a short code that stays the same for one day, so we can tell one person's repeated attempts from many people's. It is computed from your IP address and browser with a secret key that is itself random and deleted when the day ends; neither your IP address nor your browser details are stored, and once the key is gone no one — including us — can link the code back to you.

The videos and files you download

We do not store the videos, audio, images, or any media you download. Files are either redirected to, or streamed from, the source media host at the moment you request them, and nothing is retained on our servers afterwards.

Optional account (app.tikloapp.com)

If you choose to create a free account on app.tikloapp.com, we store your email address and a hashed password (or, with Google sign-in, the email address, name and profile picture Google provides), the language you chose, where the account was created from (the site's button or the line shown after a download), and when. Accounts are managed by Supabase on servers in the European Union, and account emails (address confirmation, password reset) are sent through Resend.

While signed in, the app keeps what you ask it to keep: the links and details of the TikToks you download (title, author, thumbnail, date, formats), the public accounts you follow for stories, your favorites and folders, and a record of which features you use (sign-in, download, stories, reposts) with no content attached. Never the media files. This data is private to your account; it is not shared with anyone or sold.

You can delete all of it at any time from the app's Settings, and ask us at contact@tikloapp.com to delete the account itself. Without an account, nothing on this page changes: the downloader works exactly as described above.

Third-party services

To resolve a TikTok link into downloadable files, Tiklo relies on a third-party resolver service. The link you submit is shared with that service solely to return the download options. We don't control that provider's own data practices.

The media itself is served from TikTok's content delivery networks. Your download request connects to those hosts directly.

Audience measurement cookie

To know how many people use Tiklo and how often they come back, we set one first-party cookie, tk_v. It holds a random identifier that is not derived from your IP address, your device or anything about you. It is used only to produce statistics for us, is never shared with anyone or combined with other data, and expires 13 months after it was first set — later visits do not extend it.

The detailed records linked to it (the page views and downloads described above) are deleted after 90 days; only daily totals with no identifier are kept longer. We honour the Global Privacy Control signal, and you can opt out below at any time: the cookie is deleted and your visits are no longer linked together.

Cookies and tracking

Besides tk_v (above) and the tk_optout cookie that remembers an opt-out, we use Google Analytics to measure how the site is used in aggregate (pages visited, country, device type). Google Analytics sets cookies for this purpose; you can block them in your browser settings or with a content blocker.

If you close the suggestion to install Tiklo as an app, or install it, your browser remembers that choice (and, when installing, your language) in its own local storage. That stays on your device and is never sent to us.

Tiklo does not show advertising and does not sell or share any data for advertising purposes.

Children's privacy

Tiklo is a general-purpose utility and is not directed at children. The downloader never asks anyone for personal information; the optional account requires an email address and is not intended for children.

Changes to this policy

We may update this policy from time to time. Any changes take effect when posted on this page, and the “last updated” date above will reflect the revision.

Contact

Questions about privacy? Reach us at contact@tikloapp.com.

Opt out of audience measurement

This choice applies to this browser. It turns off the tk_v cookie; Google Analytics is controlled separately, through your browser settings or a content blocker.