Security & Data

Security and data handling

We aim to use the minimum information necessary for account authorization, software licensing, product operation and support.

No TikTok password collection

Account sign-in and consent happen through TikTok's authorization flow. HTP does not ask users to enter their TikTok password into the desktop application or this website.

Minimal TikTok scope

The current configured scope is user.info.basic, used for basic account identity such as display name and avatar.

License protection

The software may process a license key and a device identifier or device hash to validate permitted software use and reduce unauthorized key sharing.

OAuth data

Authorization tokens

Where required by the implemented connection flow, OAuth authorization data and access or refresh tokens may be processed to maintain an authorized connection. Such credentials must be handled as sensitive authentication data and used only for the requested service functionality.

Users can disconnect the account in the application where available and can revoke third-party authorization through the relevant platform account settings.

Transparency note: The public Privacy Policy describes the categories of data that may be processed and the purposes for which they are used. The Data Rights page provides a direct process for access or deletion requests concerning information controlled by HTP.