Privacy Policy

Last updated: November 4, 2026

This Privacy Policy explains what personal data VinzFarm uses when you connect your TikTok account, why, how it is protected, how long it is kept and how you can delete it. We collect as little data as possible: only what is needed to send videos to your TikTok drafts.

1. Who is responsible for your data

The data controller is the operator of VinzFarm (vinz.wtf). You can reach us at any time at contact@vinz.wtf.

2. Data we use

Data received from TikTok, with your permission

When you connect your TikTok account, TikTok asks you to grant VinzFarm the following permissions:

• Basic profile information (TikTok permission user.info.basic): your TikTok user identifier for VinzFarm (“open_id”), your display name and your profile picture. We use them only to recognise your account and to show you which account is connected.
• Upload to your drafts (TikTok permission video.upload): allows VinzFarm to upload a video that you approved to your TikTok inbox as a draft. This permission does not allow posting.

To act on your behalf within these permissions, TikTok gives VinzFarm an access token and a refresh token. We also keep the list of permissions you granted, their expiry dates and the status of the videos sent to your drafts (date, video, success or failure).

We do not receive or use your password, email address, phone number, private or public videos, messages, followers, likes, comments or viewing history.

Technical data

Like any website, our web server records technical logs (IP address, date and time, page requested, browser type) to keep the site secure and working. These logs are deleted automatically after 14 days. The website uses no advertising or tracking cookies and no analytics tools.

3. Why we use it and legal basis

• To provide the Service you asked for (connecting your account and sending approved videos to your drafts): performance of a contract, Article 6(1)(b) GDPR.
• To keep the website and Service secure (technical logs): our legitimate interest, Article 6(1)(f) GDPR.

We do not use your data for advertising, profiling or automated decision-making.

4. How we protect access tokens

• Access and refresh tokens are stored only on our server, never in your browser, in a URL or in our logs.
• They are encrypted at rest (AES-256) and the encryption key is stored separately from the database.
• All exchanges with TikTok and with this website use encrypted HTTPS connections.
• Access to the server is restricted to the operator of VinzFarm and protected by strong authentication.
• Tokens are used only for the actions you approved, refreshed only when needed, and deleted as soon as you disconnect.

5. No sale, no sharing

We never sell, rent or share your data with third parties, advertisers or data brokers. Your data is only exchanged with TikTok itself, when we call TikTok’s official API to perform an action you approved. We would disclose data to an authority only if required by law.

Your data is stored on servers located in the European Union. TikTok handles the data on its side under TikTok’s own privacy policy.

6. How long we keep data

• Profile information, tokens and video history: as long as your TikTok account is connected to VinzFarm. They are deleted within 30 days after you disconnect or ask us to delete them.
• Inactive accounts: if VinzFarm has not been used with your account for 12 months, your data is deleted automatically.
• Technical logs: 14 days.
• Emails you send us: as long as needed to answer you, and at most 12 months after the last exchange.

7. How to revoke access and delete your data

You can do either, or both, at any time:

• In the TikTok app: go to Profile → menu (☰) → Settings and privacy → Security and permissions → Apps and services permissions, choose VinzFarm and remove access. (Menu labels may vary slightly depending on your app version.) VinzFarm can then no longer access your account, and we delete your data within 30 days.
• By email: write to contact@vinz.wtf with your TikTok display name and ask us to disconnect your account and delete your data. We revoke our access with TikTok, delete your data within 30 days and confirm by email.

Videos you already published on TikTok are on your TikTok account: you can delete them directly in the TikTok app.

8. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to access, correct and delete your data, to restrict or object to its processing, and to receive it in a portable format. To exercise these rights, write to contact@vinz.wtf. We answer within one month. You also have the right to lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be) or with the authority of your country.

9. Children

VinzFarm is intended for adults. We do not knowingly process data of people under 18. If you think a minor has connected an account, contact us and we will delete the data.

10. Changes to this policy

We may update this Privacy Policy. The date at the top of this page shows the latest version. If a change is significant, we will inform connected users before it applies.

11. Contact

For any question about your data, write to contact@vinz.wtf or visit our Contact page.