Privacy Policy
Last updated: September 18, 2026
This Privacy Policy explains how Victoria (“we”, “us”) handles information when you use VictoriaApp at https://tiktok.wingrow.cn (the “Service”). We designed the Service to hold as little personal data as possible.
1. Information we access from TikTok
When you sign in with TikTok, you approve a set of permissions on TikTok's consent screen. Depending on what you approve, the Service can access:
| Permission | Information | Purpose |
|---|---|---|
user.info.basic | Your TikTok open ID, avatar and display name | Signing you in and showing which account is connected |
user.info.profile | Username, bio, verification status, profile link | Showing your profile on the dashboard |
user.info.stats | Follower, following, like and video counts | Showing your account statistics on the dashboard |
video.list | Your public videos: cover image, caption, duration, date, link, and view, like, comment and share counts | Showing your recent videos and how they perform |
video.publish | Your current posting options (available audiences, interaction settings, maximum video length); the ability to post a video to your profile | Publishing a video you chose, with the settings you chose |
video.upload | The ability to send a video to your TikTok inbox as a draft | Sending a video you chose to your drafts |
2. Information you provide
- Videos and captions you choose to publish. They are transmitted to TikTok to carry out your request. Video files you upload from your browser pass through our server in memory only and are not written to storage.
- Messages you send us by email, which we use only to reply to you.
3. How the information is stored
- We do not operate a database of TikTok users and we do not keep copies of your profile, statistics or video list. That data is fetched from TikTok each time you open a page and is shown only to you.
- Your TikTok access and refresh tokens are stored in an encrypted, HTTP-only, secure cookie in your own browser. The cookie cannot be read by scripts and is only sent to our own domain.
- Our hosting provider keeps standard, short-lived technical logs (such as IP address, time and requested URL) for security and troubleshooting.
4. Cookies
The Service uses only strictly necessary cookies: a session cookie that keeps you signed in, and a short-lived cookie that protects the sign-in process against forgery. We do not use advertising or analytics cookies.
5. How we use information
We use the information described above only to provide the Service to you: signing you in, displaying your TikTok account and content to you, publishing content at your instruction, keeping the Service secure, and answering your enquiries. We do not use your TikTok data for advertising, profiling, or training machine-learning models.
6. Sharing
We do not sell, rent or trade your information. It is shared only with:
- TikTok, when the Service calls TikTok's APIs on your behalf;
- our hosting provider (Vercel), which runs the Service's infrastructure under its own data-processing terms;
- authorities, where we are legally required to do so.
7. Retention and deletion
- Pressing “Disconnect” revokes our access token at TikTok and deletes the session cookie immediately.
- You can also remove the Service at any time from “Manage app permissions” in your TikTok security settings.
- Because we do not store your TikTok data on our servers, there is nothing further to delete after you disconnect. If you have emailed us and would like that correspondence deleted, tell us and we will remove it.
8. Your rights
Depending on where you live, you may have rights to access, correct, delete or restrict the use of your personal data, to object to processing, and to complain to your local data-protection authority. To exercise any of these rights, contact us at the address below. For data held by TikTok, please refer to TikTok's own privacy policy.
9. Security
All traffic to the Service is encrypted with HTTPS. Tokens are encrypted with AES-256-GCM before they are placed in the session cookie, your TikTok password is never seen by the Service, and the TikTok client secret is kept only on the server.
10. Children
The Service is not directed to children under 13, or under the minimum age required to use TikTok in your country. We do not knowingly collect information from them.
11. Changes to this policy
We may update this policy as the Service evolves. We will post the new version on this page and update the date above.
12. Contact
Questions or requests about privacy can be sent to support@wingrow.cn.