Privacy Policy
Effective November 3, 2026
This policy explains what data the Price Tag Pete website and Price Tag Pete Studio (the "Tool") access, why, where it is kept and how to have it deleted.
1. This website
The website is a set of static pages. We do not use cookies, analytics, ads or tracking scripts, and we do not collect any personal information through the website. The hosting provider may keep standard server logs (such as IP address and time of request) under its own policy.
2. TikTok data the Tool accesses
When you connect a TikTok account, you approve the following permissions on TikTok's own page:
user.info.basic: your TikTok open ID (an app-specific account identifier), display name and avatar.video.publish: lets the Tool read your posting options (nickname, username, avatar, allowed privacy levels, whether comments/Duets/Stitches are turned off, and maximum video length) and post a video you chose, with the settings you chose.video.upload: lets the Tool send a video you chose to your TikTok inbox as a draft, which you finish in the TikTok app.
The Tool does not read your followers, messages, likes, watch history, other people's content or your TikTok password. Sign-in happens on TikTok's site.
3. What is stored and where
- Tokens: the access token, refresh token, open ID, granted scopes and their expiry times are saved in one file on the computer running the Tool, readable only by that computer's user account (file permission 600). They are not sent to us or to anyone other than TikTok.
- Posting options and profile info (nickname, username, avatar URL, privacy options) are fetched fresh each time the posting page opens and are kept only in memory. They are not saved.
- Publish IDs and status returned by TikTok are shown on screen and kept only in memory while the Tool is running.
- Videos are files already on the computer. The Tool sends a video to TikTok only after you click Post, and keeps no copy elsewhere.
- The app's client secret is read from an environment variable on that computer and is never placed in the website, the browser or source code.
4. How the data is used
Only to show you which account you are posting to, to offer the choices TikTok allows for that account, to upload the video you chose and to show its status. We do not sell, share or use this data for advertising, profiling or any other purpose.
5. Retention and deletion
- Access tokens expire after about 2 hours and refresh tokens after about 180 days unless renewed.
- Clicking Disconnect in the Tool revokes the token with TikTok and deletes the stored token file immediately.
- You can also remove the Tool's access at any time in TikTok's app settings (Settings and privacy, Security and permissions, Apps and services permissions).
- To ask us to delete anything, or to ask what we hold, email kotabluewriting@mail.grokbot.com. We will respond within 30 days.
6. Security
Requests to TikTok use HTTPS. The Tool's local interface only listens on this computer (127.0.0.1). Sign-in uses PKCE and a random anti-forgery state value.
7. Children
The Tool is not directed to children and is not intended for anyone under 18.
8. Changes and contact
We will update the effective date above when this policy changes. Contact: kotabluewriting@mail.grokbot.com