This Privacy Policy ("Policy") describes the practices of StashTik ("StashTik", "we", "us", or "our") regarding the collection, use, disclosure, retention, and protection of information in connection with your use of the website located at stashtik.app and any related services, features, content, or applications offered by StashTik (collectively, the "Service"). By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by the terms set forth herein.
1. Scope and Application
This Policy applies solely to information collected through the Service and does not apply to any third-party websites, applications, or services that may be linked to, referenced from, or accessible via the Service. The processing of personal data by such third parties is governed exclusively by their respective privacy policies.
2. Categories of Information We Process
The Service is designed to operate without the creation of user accounts or the submission of personally identifying registration information. In the ordinary course of providing the Service, we may process the following limited categories of information:
- Submitted URLs. When you submit a link to a publicly available TikTok video, story, or audio asset, the URL is transmitted to our servers solely for the purpose of retrieving the requested public media on your behalf. Submitted URLs are not retained beyond the duration of the request and are not associated with any identifier capable of linking them to you.
- Technical access data. Our servers and infrastructure providers automatically log standard request metadata, including Internet Protocol (IP) address, user-agent string, referrer URL, and timestamp, for the purposes of security monitoring, abuse prevention, capacity planning, and the generation of aggregated, non-identifying analytics.
- Cookies and similar technologies. The Service uses strictly necessary cookies and local storage to remember user-selected preferences (such as theme selection) and to enable the Service to function as intended. See the Cookie Policy for further detail.
3. Information We Expressly Do Not Collect
We do not request, require, or knowingly collect: (i) your name, email address, telephone number, or physical address; (ii) TikTok account credentials or any other third-party login information; (iii) payment-card or financial-account information; (iv) precise geolocation data; or (v) any "special category" or "sensitive" personal data within the meaning of applicable data-protection law.
4. Legal Bases for Processing
To the extent the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") or analogous legislation applies, the legal bases on which we rely to process the limited information described in Section 2 are: (a) our legitimate interests in operating, securing, and improving the Service (Art. 6(1)(f) GDPR); and (b) our compliance with applicable legal obligations (Art. 6(1)(c) GDPR).
5. Retention
Submitted URLs are processed in-memory and are not persisted to durable storage. Technical access logs are retained for a rolling period not exceeding ninety (90) days, after which they are deleted or irreversibly anonymized. Downloaded media files are streamed through the Service and are not retained following delivery to the requesting client.
6. Disclosure to Third Parties
We do not sell, rent, lease, or otherwise commercialize any information collected through the Service. We may disclose information only: (i) to infrastructure providers acting as data processors strictly in furtherance of operating the Service; (ii) where required to comply with a valid legal process, court order, subpoena, or governmental request; or (iii) where reasonably necessary to investigate, prevent, or take action regarding suspected or actual unlawful activity or violations of the Terms of Service.
7. International Transfers
The Service is operated from infrastructure located across multiple jurisdictions. By using the Service, you acknowledge that any information processed in connection therewith may be transferred to and processed in countries other than your country of residence. Where required, we rely on appropriate safeguards (including Standard Contractual Clauses) for such transfers.
8. Your Rights
Because we do not collect information that identifies you, requests to access, rectify, erase, restrict, or port personal data are generally not applicable. To the extent any such right is nevertheless exercisable under applicable law, you may contact us via the contact page. We will respond within the timeframes required by applicable law.
9. Children's Privacy
The Service is not directed to children under the age of thirteen (13), and we do not knowingly collect information from children. If you believe a child has provided information to us, please contact us and we will take reasonable steps to delete such information.
10. Security
We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect information processed through the Service. Notwithstanding the foregoing, no method of transmission or storage is one hundred percent (100%) secure, and we cannot guarantee absolute security.
11. Modifications
We reserve the right to amend this Policy at any time. The "Last updated" date at the top of this page reflects the date of the most recent revision. Continued use of the Service following the posting of an amended Policy constitutes your acceptance of the amended Policy.
12. Contact
Questions, complaints, or requests regarding this Policy may be directed to us via the contact page.