CopyTT Privacy Policy

Scope and core privacy approach

CopyTT is designed for supported TikTok media. The website accepts public post links only. The extension can process supported media that your current browser session has already loaded, but it does not unlock content or export your password, cookie, or access token.

The website and extension have different data paths. The website sends the public post URL to the download service for analysis. The extension scans supported elements in the current TikTok page locally so it can place download controls, then validates and downloads the media connected to a deliberate user click.

Public links submitted on the website

When you paste a public TikTok URL into the website and choose Find media, that URL is sent to the CopyTT download service and used to request the public post information needed to identify eligible video or photo files. TikTok and its media delivery providers receive the network requests needed to return that public information.

A successful analysis result may remain in short-lived service memory for up to about 30 seconds so an immediate duplicate request does not repeat the same upstream work. The service then issues a short-lived encrypted download address. When you choose Download, media bytes are streamed through the download service to your browser so the upstream request can use the anonymous TikTok access context created during analysis. The service does not write the media to disk, create an account or media library, or keep a personal download history.

Website operations, security, and rate limiting

The hosting and security infrastructure may process standard request data such as IP address, browser or user-agent information, referring page, request time, response status, and security signals. Short-lived one-way request fingerprints based on network information may be held in service memory for roughly one minute to limit abusive analysis and download volume.

Operational information is used to deliver the service, investigate errors, prevent abuse, and protect users and infrastructure. Hosting providers may retain their own access and security logs under their applicable terms and retention practices.

Analytics, cookies, and advertising on the website

When Google Analytics 4 is enabled, it may receive the page path without its query string, language, media type, analysis outcome, error category, download action, and a verified quality label. CopyTT analytics events do not include the submitted TikTok URL, media URL, post or media ID, download filename, or URL query string.

Analytics and advertising providers may independently process IP address, device or browser information, cookies, or similar identifiers under their own policies. If Google AdSense is enabled, Google and its partners may use these technologies to deliver and measure advertising according to applicable consent choices and account settings. The extension itself does not use advertising cookies or analytics.

What the browser extension processes locally

On supported www.tiktok.com and m.tiktok.com pages, the extension observes page changes and locally scans visible or loaded video, image, and supported recommendation-card elements so it can identify eligible media and place the correct download control. This pre-click scan may inspect the current page URL, post ID, media type, source address, readiness, dimensions, visibility, and nearby creator text. It stays inside the current TikTok tab and is not sent to CopyTT.

After a deliberate click, the extension performs stricter checks on the selected media, its current page and post binding, eligible TikTok or ByteDance media addresses, response type, size, and file identity. It may work with media already available to a signed-in TikTok session, but it does not bypass access controls or copy browser credentials to CopyTT.

For a normal extension download, media bytes move from the TikTok media source to the browser on your device. CopyTT does not receive the media file, page URL, media URL, creator name, post description, or download history. Temporary scan state, video data, and Blob URLs remain in page memory and are released after media changes, completion, failure, page closure, or a safety time limit.

Extension permissions and browser storage

The extension uses site access on supported TikTok pages to place a download control beside eligible media. The activeTab permission supports actions in the current tab, downloads starts and observes the user-requested browser download, and storage remembers settings and short-lived download state.

Persistent local storage contains only preferences such as filename format and whether download buttons are always visible or shown on hover. Session storage may temporarily contain a download ID, originating tab, filename, media category, byte counts, and completion or interruption state. Terminal state expires after about five minutes, and browser session data is removed when the session ends. The extension does not use the Cookies API, read the clipboard, or access non-TikTok pages.

• activeTab: connect a user action with the current supported TikTok tab.
• downloads: start the selected file download and report its progress or interruption.
• storage: keep local preferences and minimal short-lived download state.
• Optional feedback host access: contact the disclosed feedback service only after a failed download and an explicit user choice.

Optional download-failure feedback

If the feedback feature is available in your extension version, it appears only after a download failure. Opening the explanation does not send a report. A report is sent only after you choose Send feedback and grant the optional feedback-service permission.

The report may include the public post ID, extension version, media and page categories, fixed error code and stage, evidence route and candidate count, coarse response, file-size, browser and operating-system categories, filename setting, and whether the media was ready or protected. It does not include the media file, complete page or media URL, cookies, sign-in data, username, post description, filename, raw error message, call stack, or a persistent device identifier.

A raw report containing the post ID is retained for no more than 30 days. De-identified aggregate error counts may be retained for up to 90 days. An abuse-prevention key derived from network information may be retained for up to 24 hours. The extension displays a report ID and one-time deletion token after a successful submission; save both if you may request early deletion.

When information reaches other services

CopyTT does not sell personal information. Information is shared only as needed to provide, secure, measure, or support the feature you chose, or when required by law.

Relevant recipients can include TikTok and its media delivery providers, the website hosting and security provider, Google when analytics or advertising is enabled, the browser vendor and extension store, and the optional CopyTT feedback service. Links you open to TikTok, an extension store, or another website are governed by that service’s own privacy policy.

Retention summary

• Website analysis result in service memory: up to about 30 seconds.
• Encrypted website download address: valid for up to about 30 minutes; media bytes are streamed and not stored as a file by the service.
• Website in-memory rate-limit fingerprint: roughly one minute; external hosting logs may follow the host’s retention practices.
• Extension preferences: until you change them, clear extension data, or uninstall the extension.
• Extension active download state: for the browser session; terminal state expires after about five minutes.
• Temporary extension video Blob: until completion, failure, page closure, or no more than 15 minutes.
• Optional raw feedback report: up to 30 days; de-identified aggregate counts: up to 90 days; abuse key: up to 24 hours.

Your choices and requests

You can use the website without creating an account, decline the optional feedback permission, change browser cookie and download settings, clear extension storage, revoke TikTok site access, or uninstall the extension. Blocking analytics or advertising technologies may affect measurement or ad behavior but should not require you to provide TikTok credentials.

Depending on applicable law, you may request access, correction, deletion, restriction, or information about data associated with you. Because the service does not create user accounts, we may need the report ID and deletion token or other reasonable details to locate a specific voluntary submission.

Extension Limited Use commitment

The extension handles browser and page information only for its disclosed single purpose: helping the user save eligible media from the current supported TikTok page, remember related local settings, report download status, and submit an optional user-approved failure report.

The use of information received from Chrome APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. Extension data is not used for personalized advertising, credit decisions, unrelated profiling, or sale to data brokers.

Children, security, and international processing

CopyTT is not directed to children under 13, and we do not knowingly ask children to provide personal information. If you believe a child submitted information through support or feedback, contact us so it can be reviewed.

We use technical and organizational safeguards appropriate to the service, including HTTPS for transmitted data and narrow extension permissions. No internet service can guarantee absolute security. Service providers may process technical data in countries other than your own, subject to their safeguards and applicable law.

Contact and policy changes

We may update this policy when the website, extension, providers, or legal requirements change. The current effective date appears at the top. Material changes to extension data practices will also be disclosed where required before the changed processing occurs.

For privacy questions or a supported deletion request, contact the address below. Do not include a TikTok password, cookie, access token, private media, or other unnecessary sensitive information.

Email [email protected]