Legal

Privacy Policy

How TikDownloader handles the links you paste, what is logged, and what is deliberately not collected.

Last updated July 26, 2026 · Published by TikDownloader

The short version

No accounts, no cookies for tracking, no third-party analytics, and no stored media. The link you paste is used to fetch public metadata and then forgotten. If you use the private video downloader, the page source you paste is parsed once and dropped — never logged, never cached.

What we collect

The link you submit. It is sent to our server so we can read the post's public metadata. The resolved metadata — caption, the handle that posted it, media URLs, duration, dimensions — is held for a short period (ten minutes by default) so that repeating the same lookup does not hit TikTok again. It is never written to a database, and it disappears when the cache entry expires.

Cookies TikTok issues to us. Fetching a post page causes TikTok to set its own cookies on that response, and they are kept alongside the media URLs for the same ten minutes. This is a technical necessity rather than a choice: TikTok's delivery hosts check those cookies against the signature in the URL, so a download fails without them. They identify this server's own anonymous fetch, made seconds earlier, and nothing about you.

Page source, only if you paste it. The private video downloader asks you to paste the source of a TikTok page your own browser fetched. That document is more sensitive than a link: alongside the media URLs it contains your TikTok user id and short-lived request tokens, and fragments of whatever else was on the page. It is parsed once, in the request that carries it, purely to find the media URLs, and then released. It is never written to disk, never put in a cache, and never recorded in a log line — including our error logs, which record a message and a stack trace and never the request body. Only the extracted media URLs survive, under a random token rather than under the post's id, specifically so that the next visitor who pastes the same link cannot be handed a post they are not allowed to see. Nothing on this site ever asks for your TikTok password, and nothing signs in on your behalf.

Request metadata. Standard web-server information: IP address, user agent, timestamp, and the path requested. Your IP address is used to enforce the rate limit of twenty lookups a minute per address that keeps the service available. We do not build profiles from it and do not sell or share it.

What we do not collect

No account, email address, or password — there is nothing to sign up for, and you are never asked to log in to TikTok.
No downloaded media. Files stream through and are never stored.
No advertising or analytics trackers, no third-party pixels, and no TikTok pixel.
No clipboard contents. The Paste button reads your clipboard locally in your browser only when you press it; that value is only submitted if you run a lookup.

Cookies and local storage

We set no cookies. One value is written to your browser's localStorage: your light or dark theme preference. It never leaves your device and is not readable by us.

Third parties

To resolve a link, our server contacts TikTok (ByteDance Ltd.)on your behalf, and it may try a second request fingerprint and then TikTok's embed player before one returns a usable page. Your browser does not contact TikTok directly during a download, so no referrer or browser fingerprint of yours reaches them through this tool, and nothing appears in your TikTok activity. ByteDance sees a request from our server, not from you. Their handling of that request is governed by their own privacy policy.

Thumbnail images shown in the results are loaded by your browser directly from TikTok's CDN with a no-referrer policy. If you would rather avoid that connection entirely, blocking images for this site does not affect downloads.

Data retention

Resolved post metadata: ~10 minutes, then discarded.
TikTok's own cookies from our fetch: held with that metadata, for the same ~10 minutes.
Pasted page source: never retained. Parsed in the request and released.
Media files: never retained. Streamed, not stored.
Rate-limit counters: cleared each window.
Server access logs: retained only as long as the hosting provider's default, for security and abuse investigation.

Your rights

Because we hold no account data, there is generally nothing to export or delete on request. If you believe a specific piece of information about you is held here, contact us and we will investigate and remove it where it exists.

Children

This service is not directed at children under 13 and we do not knowingly collect information from them.

Changes

If this policy changes materially, the date at the top of this page changes with it. Continued use after an update constitutes acceptance.