Privacy Policy — GRC Shorts Analytics

Last updated: 5 September 2026

Who we are

This application ("the App") is a private, single-user analytics tool operated

by the owner of the TikTok account `@grc_with_myk`. It is not a commercial

product, it is not offered to other users, and it has no public sign-up.

Contact: the developer account email registered with TikTok for Developers.

What the App does

The App reads statistics about videos published by the account owner on their

own TikTok account, so the owner can see how their own content performs over

time. That is its entire purpose.

What data we access

Through the TikTok Display API, with the scopes `user.info.basic`,

`user.info.stats` and `video.list`, the App reads:

  • the account owner's own profile: open id, display name, follower count
  • the account owner's own published videos: video id, title/description,

    • creation time, view count, like count, comment count, share count

    The App accesses only the account that authorised it. It cannot and does

    not read other users' accounts, private videos, direct messages, comments

    written by other people, or any personal data belonging to anyone else.

    What we do NOT do

  • We do not collect data about any person other than the account owner.
  • We do not sell, rent, share or transfer data to any third party.
  • We do not use the data for advertising, profiling or training AI models.
  • We do not publish, post, delete or modify content through the API.
  • We do not use tracking cookies; the App has no web interface for visitors.

    • Where the data is stored

    Video statistics are stored as a JSON file on a private server controlled by

    the account owner, located in the European Union. Access credentials are held

    in an encrypted secrets manager and are never written to disk in plain text.

    The data stored is statistical (view counts, like counts and similar) about

    the owner's own videos. It contains no data about other individuals.

    How long we keep it

    Snapshots are retained so the owner can compare performance over time. The

    owner may delete the stored file at any moment; there is no other copy.

    Legal basis (GDPR)

    The only natural person whose data is processed is the account owner, who is

    also the operator of the App. Processing is carried out on the basis of that

    person's own consent, given by authorising the App, and can be withdrawn at

    any time by revoking the App's access in TikTok settings, which immediately

    ends all data collection.

    Your rights

    Because the only data subject is the account owner, the rights of access,

    rectification, erasure, restriction, portability and objection under the GDPR

    are exercised directly by that person over their own stored file.

    Revoking access

    Access can be revoked at any time in TikTok: Settings and privacy → Security

    and permissions → Manage app permissions. Revocation stops all further data

    collection immediately.

    Changes to this policy

    Any change will be published on this page with an updated date.