Privacy Policy

Last updated: November 9, 2026

This policy explains what information Noah Vel Studio ("we", "the studio") handles, why, where it is kept and how it is deleted. It covers this website (https://noah-vel-studio.pages.dev) and the studio's private publishing tool ("the Tool"). The studio is operated by Joseph Duchesneau, Québec, Canada.

1. Who uses the Tool

The Tool is a private application that runs on the operator's own computer. It has no public sign-up and is only used to connect the studio's own social media accounts. We do not offer it to the public and we do not connect other people's accounts.

2. This website

• The website does not use cookies, analytics, advertising trackers, forms or accounts.
• It is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical data needed to deliver pages (such as IP address, browser type and the requested address) under its own privacy policy. We do not receive or store this data ourselves.
• The page at /auth/tiktok/callback is where TikTok returns after the operator signs in. TikTok adds a one-time authorization code and a security value ("state") to its address. The page's script, running in the operator's browser, immediately removes them from the address bar and hands them to the Tool on the same computer. The website does not store, transmit to us or log these values itself. The code cannot be used without the Tool's secret credentials, which never leave the operator's computer.

3. Information the Tool receives from TikTok

When the operator connects the studio's TikTok account, the Tool receives and stores:

• an access token (valid 24 hours) and a refresh token (valid up to 365 days), used to act on the account with the permissions the operator granted;
• the account's TikTok identifier (open_id), the permissions granted (scopes) and, if the "user.info.basic" permission is granted, the account's display name, to show which account is connected;
• for each video sent: the identifier and status returned by TikTok (for example "sent to inbox" or "published") and any error message.

The Tool does not read followers, messages, comments, analytics or any other account data.

4. How the information is used

Only to upload the studio's approved videos to the studio's TikTok account, to show the operator the result, and to avoid sending the same video twice. Nothing is sold, rented, shared with third parties or used for advertising.

5. Where it is stored and how it is protected

• Tokens are stored on the operator's computer in a file readable only by the operator's user account (permissions 600). Publishing records are kept in a local database on the same computer.
• The Tool's control panel is only reachable from that computer (127.0.0.1), checks the requesting host and requires a per-session anti-forgery token for every action.
• Secrets are masked in the Tool's logs. They are never sent to this website or to any party other than TikTok.
• No system is perfectly secure; the security of this data also depends on the security of the operator's computer.

6. Retention and deletion

• Disconnect: the operator can disconnect TikTok from the Tool at any time. The Tool then asks TikTok to revoke the access token and deletes the access token, refresh token and account identifier from the computer. If TikTok cannot be reached, the local tokens are still deleted and the Tool reports that the revocation must be completed from TikTok.
• Access can also be revoked from the TikTok app, in the account's settings for apps and services.
• The local publishing history (dates, statuses and TikTok post identifiers of the studio's own videos) is kept for record-keeping until the operator deletes it.
• If you believe the studio holds information about you, contact us and we will answer and delete it where applicable.

7. Children

The website and the Tool are not directed to children and do not knowingly collect information from anyone under 18.

8. Changes

We will update this page if the Tool's handling of data changes, and change the date above.

9. Contact

Joseph Duchesneau, Québec, Canada · duchesneauprojet@gmail.com