Privacy Policy

The short version

We do not use cookies, we do not run analytics or advertising trackers, and we do not build a profile of you. We never store a history of what you have downloaded. The TikTok links you submit are held briefly in server memory to avoid repeating work, and then they are gone.

What passes through the service

• The TikTok link you submit. It is sent to our lookup provider so the post can be resolved, and it is held in a short-lived in-memory cache so that submitting the same link twice does not trigger a second lookup.
• Your IP address. It is used to enforce rate limits, which is what stops automated traffic from exhausting the service. It is held in server memory as a counter, not written to a database.
• Standard request information — the page requested, the time, your browser's user-agent string — as recorded in ordinary server logs by our hosting provider.

What we do not do

• No cookies are set by this site, for any purpose, including analytics.
• No analytics, advertising, fingerprinting, or session-replay scripts run on these pages.
• No account, email address, or payment detail is ever requested.
• No record is kept linking you to the posts you looked up or the files you saved.
• Nothing is sold, rented, or shared with data brokers.

How long anything is kept

Resolved post information is cached in server memory for up to one hour, then discarded. Rate-limit counters expire within minutes. Both live in the memory of a running server process — when that process restarts, they are gone, and neither is written to disk.

Server logs are retained by our hosting provider under their own retention schedule, which is typically measured in days to weeks.

Third parties involved in a download

Resolving a link requires sending it to a third-party TikTok data provider accessed through RapidAPI. That provider receives the link. It does not receive your IP address, because the request is made by our server rather than by your browser.

When you save a file, your browser requests it from our server, and our server fetches it from TikTok's content delivery network and streams it back to you. TikTok therefore sees our server, not you. This is a side effect of how the proxy works rather than a privacy feature we are promising to maintain.

Fonts are served from our own domain. No request is made to Google Fonts or any other font host while you browse.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete personal data an organisation holds about you, and to object to its processing.

We mention these rights in good faith while being straightforward about the practical position: because there are no accounts and nothing durable is stored, in almost every case we simply hold no personal data about you to produce or erase. If you believe otherwise, write to us at legal@klipp.example and we will look into it.

Children

This service is not directed at children under 13, and we do not knowingly collect personal information from them. Since we collect no personal information from anyone, this is a statement of intent rather than a screening process.

Security

Traffic is served over HTTPS. That said, no internet service can promise perfect security, and we do not claim to be an exception. The strongest protection here is structural rather than procedural: there is no store of user data to breach, because we do not build one.

Changes to this policy

If this policy changes materially, the revision date at the top of the page will change with it. Continuing to use the service after a change means you accept the updated policy.

Contact

Questions about privacy can be sent to legal@klipp.example.