1. Controller

Controller under GDPR: Julius Knippel
Address: Zum Kreuzbaum 29, 54413 Gusenburg, Germany
E-Mail: ttposter@gmx.de

2. Purpose of Website and Tool

• Provide public information pages including Terms/Privacy.
• Provide the tool for prompt generation and own video uploads.
• Optional: connect a TikTok account and export videos as TikTok drafts (Inbox Draft).
• Security, error analysis, and abuse prevention.

3. Data We Process

3.1 Technical Data

• IP address, timestamp, requested pages/endpoints, user agent.
• Error/security logs (e.g., failed requests, status codes).

3.2 Inputs and Generated Content

• Prompt/input text used for video generation (please avoid sensitive data).
• Uploaded videos, generated video files, and metadata (job ID, timestamps, status, file size).

3.3 TikTok OAuth & Draft Export (Optional)

• OAuth tokens (access token, refresh token) and metadata (expiry times).
• open_id (TikTok identifier) and, where available, basic profile data (e.g., username) for account mapping in the UI.
• Upload status/IDs (e.g., publish_id) for technical traceability.

4. Legal Bases (GDPR)

• Art. 6(1)(b) GDPR (contract/performance): provision of tool functions (generation, export).
• Art. 6(1)(f) GDPR (legitimate interest): IT security, stability, abuse prevention, error analysis.

5. Recipients / Third Parties

• Hosting: Hetzner Online GmbH (server operation).
• Video generation: Atlas Cloud / Seedance (video-generation service).
• TikTok: for draft export, required video data/metadata are transmitted to TikTok.

6. Retention Periods

• Videos: typically up to 14 days (download/export/troubleshooting), then deleted.
• Logs: typically up to 14 days, then deleted.
• Tokens: until revocation or automatic deletion after 90 days of inactivity.

7. Security

• Transport encryption (HTTPS).
• Server-side file/secret access controls (least privilege).

8. Cookies / Tracking

Public pages do not use ad tracking. The tool may use local browser storage (localStorage) for convenience (e.g., last job handle, inputs, mode and toggle state). No non-essential tracking cookies are set.

9. Your Rights

• Access, rectification, erasure, restriction, portability.
• Objection to processing based on legitimate interests.
• Complaint to a data protection supervisory authority.

10. Contact

Privacy requests: ttposter@gmx.de