Privacy Policy
In short: we collect only what we need to show your LIVE dashboard and overlays. We never sell your data, never post on your behalf, and you can ask us to delete everything at any time.
1. Information we collect
When you create an account:
- Your email address, and your password stored only as a salted scrypt hash (never in plain text)
- If you sign in with Google: your Google account ID, email and name, read once during sign-in. We do not store Google access tokens.
- The TikTok @username you enter, which we use to read your public LIVE. We do not access your TikTok account.
From your LIVE streams, while you use the dashboard or an overlay:
- Public interactions shown in your LIVE, such as comments, gifts, likes, joins, and viewer counts, including the public usernames and profile pictures of the viewers who sent them
If the streamer turns on gift text-to-speech, the comment of a viewer who sends a gift is converted to speech and played on the stream. That audio is kept in memory for about 10 minutes and never saved.
Sign-in sessions: for each device you sign in on, we keep a session record with the browser type, IP address, and when it was last used, so you can review and sign out of your devices.
When you donate to a streamer: the name you enter, the amount, your message, the voice, YouTube video and Spotify song you choose, and your IP address (to prevent abuse). The streamer sees your name, amount and message, and they are shown and read aloud on their stream. If a streamer blocks a donor, we keep that donor's name and IP address in the streamer's block list until the streamer removes it.
2. How we use your information
- To sign you in and keep you signed in securely
- To display your LIVE stream interactions in your dashboard and overlays
- To remember your overlay settings
- To maintain, secure, and improve the Service, and to respond to your support requests
We do not sell your data, use it for advertising, or post content to TikTok on your behalf.
4. Data retention
LIVE interactions are relayed in real time and are not stored on our servers. Donation records are kept for the streamer's history and accounting; the synthesized voice audio of a donation is deleted after 7 days. Sign-in sessions end after 30 days without use, or immediately when you sign out. Account data is kept while you use the Service and deleted within 30 days after you ask us to delete it.
5. Security
We use industry-standard measures such as encrypted connections (HTTPS), sign-in cookies that scripts cannot read, and session tokens that are stored only in hashed form. No system is completely secure, but we work hard to protect your information.
6. Your rights and choices
- Access and deletion: email us to request a copy of your data or to have it deleted.
- Devices: review every signed-in device and sign any of them out from your account page.
- Revoke access: if you signed in with Google, remove WaroengTikTok at any time from your Google Account under Security → Third-party apps.
- Depending on where you live, including under Indonesia's Personal Data Protection Law (UU PDP), you may have additional rights. Contact us to exercise them.
8. Children's privacy
The Service is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has used the Service, contact us and we will delete the data.
9. Changes to this policy
We may update this policy from time to time. We will change the effective date above and, for significant changes, notify you in the Service.
10. Contact us
Questions or requests about your privacy? Email us at support@waroengtiktok.com.