Privacy policy
Last updated 2 November 2026
socialgen is a studio for making TikTok photo slideshows from your own ideas and posting them to your own TikTok account. It is operated by David Noé Bänziger, an individual developer. This policy says exactly what socialgen stores when you use it, why, for how long, and how to have it deleted.
Who is responsible
- Controller
- David Noé Bänziger
- Contact for anything about your data
- hello@davidnoe.art
The short version
- socialgen uses your TikTok account for three things only: to sign you in, to show you which account you are posting to, and to post a slideshow when you press Post.
- Nothing is ever posted without your explicit action. A post is sent to TikTok only when you press Post on the review screen, with the visibility, comment and disclosure settings you chose there. There is no automatic or scheduled posting in the studio.
- No advertising, no tracking, no analytics scripts, no selling or sharing of your data.
- You can disconnect and delete everything at any time from Settings, in one step.
What socialgen stores from TikTok
When you sign in with TikTok, socialgen asks for four permissions: user.info.basic, user.info.profile, video.upload and video.publish. From what TikTok returns, it stores:
| Data | Where it comes from | Why it is kept |
|---|---|---|
| Your TikTok open_id (an identifier TikTok issues for socialgen only) | Sign-in | To know which account is yours and keep your slideshows apart from everyone else’s |
| Access token, refresh token and their expiry times | Sign-in | To post for you when you press Post, and to read the status of that post |
| The list of permissions you granted | Sign-in | To tell you if posting was not allowed, instead of failing later |
| Display name and @username | user/info and creator_info | To show you which account you are signed in with and posting to |
| For each post you make: TikTok’s publish id, the time, the visibility you chose, TikTok’s processing status and failure reason if any, and the post id if TikTok returns one | Posting | To show you whether the post went through and mark the slideshow as posted |
socialgen does not store your avatar (it is fetched from TikTok and shown when a page needs it), your union_id, your follower or like counts, your existing videos or their statistics, or anything about your followers or viewers. The posting options TikTok returns each time you open the review screen (which visibility levels you may use, whether your comments are turned off) are used to build that screen and are not stored. Your title and caption are sent to TikTok with the post and not kept by socialgen.
What socialgen stores that you make
- Your slideshows: the text of each slide, the library photo or colour behind it, the look and the shape you chose, and when you created and changed it.
- Rendered slides: the 1080-pixel JPEG images of each slideshow. These are served from socialgen’s own domain at an unlisted address so that TikTok can fetch them when you post, which means anyone who has that exact address can open them.
Cookies and browser storage
- sgen_session: keeps you signed in. It holds your open_id and an expiry time, signed so it cannot be forged, and lasts 30 days or until you sign out.
- sgen_oauth_state: lasts ten minutes during sign-in, to make sure the sign-in that comes back from TikTok is the one your browser started.
Both are strictly necessary. There are no analytics, advertising or third-party cookies.
Who processes it
socialgen runs on Cloudflare, which hosts the application, stores the data above, renders slide images and keeps short-lived request logs (up to 7 days) for debugging. Your data is sent to TikTok only when you sign in and when you post. It is not sold, rented or shared with anyone else, and it is not used for advertising or to train models.
How long it is kept, and how to delete it
- Your account record, tokens, slideshows and rendered slides are kept until you delete them.
- Settings → Disconnect and delete my data withdraws socialgen’s access at TikTok and immediately deletes your account record, your tokens, every slideshow, every rendered slide and every post record. Deleting a single slideshow deletes its rendered slides too.
- Signing out removes the session cookie from your browser but keeps your slideshows for next time.
- You can also remove socialgen from your TikTok account in the TikTok app’s settings, which stops all access immediately; write to hello@davidnoe.art and the stored data will be deleted within 30 days.
- Posts already published on TikTok are on TikTok and are deleted there, in the TikTok app.
The operator’s own tools
Separately from the studio, socialgen has a private operator suite, opened with an API key, that the operator uses for TikTok accounts he connects himself. For those accounts only, it additionally stores follower, following, like and video counts and the public statistics of their posts. Accounts that sign in to the studio are stored apart from these and are never read, analysed or posted to by the operator suite.
Your rights
You can ask for a copy of your data, its correction or its deletion, object to its processing, or ask for it in a portable form, by writing to the address above. Under the GDPR you may also complain to a supervisory authority. socialgen is not intended for anyone below the minimum age TikTok requires in their country.
Changes
Changes to this policy are published here with a new date at the top.