Privacy Policy

1. Controller

Flickz (private individual, Italy) — [email protected].

2. What we store

A hashed version of your activation key, your purchase email, your plan and expiry, a log of exports (file name, sizes, mode, time), reviews you submit and, if you connect it, basic TikTok profile stats.

2b. Security log

To protect accounts from sharing and abuse, when you sign in with Discord, open the Studio or patch a video we log a security record: a one-way hash of your IP address (never the IP itself), approximate location from Cloudflare (country, region, city), your network provider and a browser/OS summary. These records are deleted after 90 days.

2c. Discord sign-in

When you sign in with Discord we receive and store your Discord user ID, username, display name, avatar ID and, if Discord shares it, your email address. We use them to identify your account, link your license and show your name and avatar on the site and in the extension. We never receive your Discord password or messages.

2d. Browser extension

The Flickz Uploader extension stores in your browser (extension local storage): a connection token for your account, a random install ID, your cached plan status, your settings (on/off, upload method, stats and download toggles) and a cached copy of your Discord avatar. When it talks to flickzuploader.com it sends the connection token, the install ID and the extension version, to check your plan and enforce device limits. When you upload a video on TikTok Studio it sends only the MP4 structure header described in section 3 (for Method 2, the header of the 1080p file it creates on your device) and receives back the patched header bytes; it never uploads your video or audio to us. On free accounts it also reports the file size to count free uploads. Video and author statistics and original-quality downloads are read from TikTok pages you visit and are shown locally; they are not sent to us. The extension does not track your browsing, sell data or show ads.

3. What we never receive

Your video files. On the site and in the browser extension, the audio and video data never leave your device. To prepare the patch we receive only the file's structure header (the MP4 "moov" box: track timings and sample tables, which can include basic metadata such as the creation date) plus a checksum of the media data. The header is processed in memory to build the patched header, sent back to your browser, and not stored.

4. Payments

Payments are handled by Payhip (and PayPal or card processors through Payhip). We receive your email, order/subscription ID and plan, never your full payment details.

5. Processors

Cloudflare (hosting, database), Discord (sign-in), Payhip (checkout), and optionally Resend (key emails) and TikTok (account connection).

6. Legal basis and retention

We process data to provide the service you bought (contract) and keep it while your subscription is active and as required for tax/accounting obligations afterwards.

7. Your rights

You may request access, correction or deletion of your data, and complain to your data protection authority. Contact [email protected].

Last updated: October 2026