Privacy Policy
Last updated 11 September 2026.
Nambu Lore, the TikTok integration of NAMBU, runs on one person's computer. There is no server, no database, and no analytics, so there is very little to say — but what there is, is said plainly here.
What is collected
- OAuth tokens — the access token and refresh token TikTok issues when you authorize the app, plus the
open_idthat identifies the authorizing account to the API. - Basic profile information — the username, nickname, avatar URL and posting options TikTok returns from its creator-info endpoint, used to show which account is connected and which privacy levels are allowed.
- Videos and captions you publish — held on the local machine while they are uploaded.
Where it is kept
On the operator's Windows machine only. Tokens are encrypted with the Windows Data Protection API (DPAPI) under the operator's user account, in their own user profile. Nothing is uploaded to any server run by this project, because none exists. This website is static and stores nothing: it sets no cookies and runs no analytics.
Who it is shared with
No one. Data is exchanged with TikTok's API and with no other party. It is never sold, rented, or used for advertising or profiling.
How long it is kept
Tokens are kept until they expire or access is revoked, then deleted. Videos and captions are kept on the local machine until the operator deletes them.
Your control
- Revoke access in the TikTok app: Settings and privacy → Security and permissions → Manage app permissions.
- Ask for deletion of anything held locally by writing to the address below; the stored token file is deleted on request.
- Deleting a post is done in TikTok itself, which remains the record of what was published.
Children
The integration is not directed at children and is used only by its operator, who is an adult.
Changes
Changes are published on this page with a new date above.