Privacy policy

1. Information and purposes

Usernames, account or post IDs, links, filters and pagination parameters you submit are sent to our server and the providers needed to retrieve, resolve, play or download content. Do not submit passwords, login cookies, private links or information you are not entitled to provide.

Results can include public handles, avatars, biographies, identifiers, statistics, social connections, posts, comments, live interactions and region references supplied by a source. Public information can still be personal data. The tools are not for verifying identity, precise location or making decisions with significant effects on people.

2. Cookies and browser storage

The necessary tt_session cookie contains an encrypted random session ID, expiry and provider tickets or live session state, not TikTok login credentials. It uses HttpOnly and SameSite=Strict, plus Secure over HTTPS. Its browser lifetime is 24 hours after it is set; later queries can update it, and the internal session also has its own expiry.

Local storage ttutils:history keeps up to 8 recent successful query inputs, tools and timestamps until cleared or replaced by newer entries. Session storage ohmytt:draft and ohmytt:pending keep language-switch drafts and pending cross-page queries, normally removed when consumed or when the tab session ends; browser session restoration may retain them.

Clear local query history, drafts and cookies through your browser’s site-data settings. Necessary storage supports requested functions; blocking it may affect sessions or history.

3. Analytics

The production site uses a third-party analytics service by default to measure visits, page views and tool usage. The site does not provide an analytics switch. Requests expose your IP address, browser and network information to that service, whose script can process page visits, referrers and usage events. Our custom events include only tool, action, language, mode and operation scope, not submitted usernames, links, results or error messages.

For access, deletion or objection requests concerning analytics data, contact support@ohmytt.com. Provider retention depends on its actual configuration; this policy does not promise complete anonymity or zero storage.

4. Recipients, logs and international processing

Third-party infrastructure providers host the site and IP addresses are used for rate limiting. Necessary request information may be sent to TikTok and third-party public-data providers to fulfill your queries. Your browser may load avatars, covers, audio and video directly from TikTok or media CDNs, disclosing its IP, browser and necessary request information.

Application query logs record operation type, status, duration or error code. Infrastructure provider request logs, tracing and provider records may contain additional request metadata, including URLs. Signed download URLs contain media information; do not share them publicly. The application has no configured database for a permanent query-result or media library; this does not mean infrastructure or providers keep no records.

Infrastructure, public-data, media delivery and analytics providers may process data outside your country. Processing locations, contractual safeguards and provider retention depend on the actual service configuration. This policy alone does not establish that all applicable international-transfer requirements have been satisfied.

5. Processing grounds and retention

Where permitted by applicable law, requests you initiate are processed to provide the tool service you ask for; minimum technical information is used to operate and protect it; analytics measures service usage, and its lawful basis depends on applicable law and the actual configuration; valid complaints and legal obligations may require additional processing. Looking up another person’s public data is not that person’s consent and does not replace any required assessment of a lawful basis.

Inputs and results are used while processing and displaying requests. Browser storage and cookie periods are described above. Logs, complaint records and provider records are retained according to security or fault investigations, request handling, legal obligations and provider settings, limited to what those purposes require. Specific backend periods remain subject to verification; we cannot promise immediate deletion from every third-party system.

6. Rights, minors and changes

Depending on applicable law, you may have rights of access, correction, erasure, restriction, portability and objection, including objection to processing based on legitimate interests. Contact the operator with a privacy request or complain to the competent data-protection authority. We cannot delete TikTok originals or files other people have downloaded.

The service is for adults aged 18 or older and is not directed to children. Report concerns about minors, unauthorized disclosure or misuse through Copyright & privacy requests. Do not send unnecessary sensitive information.

Policy changes appear here with an updated date. This policy itself does not replace any notice, lawful basis or consent required by applicable law.