Halfcut Lab Uploader
Privacy Policy
Last updated: October 18, 2026
This policy describes how the Halfcut Lab website and Halfcut Lab Uploader handle data. The uploader is a local desktop tool operated for the Halfcut Lab channel. It is currently limited to the account owner and configured TikTok sandbox target accounts, with no public signup service.
What the website does
This website explains the channel and the uploader. Its own page files contain no advertising scripts, analytics trackers, account forms or embedded social players. Following a YouTube or TikTok link opens that platform, where its own privacy policy applies. Hosting infrastructure may process connection information such as IP addresses and standard security logs to deliver and protect the website.
What the uploader accesses
The uploader uses TikTok authorization rather than collecting a TikTok password. An authorized account grants these permissions:
| Permission | Purpose |
|---|---|
user.info.basic | Read the account identifier, display name and avatar. |
user.info.profile | Read profile details such as the username, bio and profile link. |
user.info.stats | Read account counts, including followers, following, likes and videos. |
video.list | Read public video details and counts, including views, likes, comments and shares. |
video.upload | Send a video selected by the operator to TikTok as an inbox draft. |
The uploader does not request permission to publish directly. An operator reviews and posts each draft within TikTok.
Storage and sharing
The desktop app stores its client credentials and TikTok authorization token in ~/.config/tiktok-cli/ on the operator’s computer, or in a configuration folder selected through TT_CONFIG. Credential and token files are created with permissions limited to their owner.
Profile and video statistics are shown in terminal output. The operator controls any copies or exports of that output. Selected video files are transferred to TikTok. The uploader has no central service that receives a copy of the account’s data, and the app does not sell data or send it to advertisers.
Retention and deletion
Local credentials remain until the operator removes them. Tokens remain until logout or removal of the local token file. Run tt auth logout to request revocation of the stored token and delete the local token file. This command keeps the client credentials, so remove those separately when the app is no longer needed.
The operator can remove the remaining local configuration folder and any saved statistics or exports. Delete drafts or published videos through TikTok; logging out of the uploader does not delete content already transferred to TikTok. TikTok controls retention on its own systems.
Access and questions
The authorized account owner controls the local data and can inspect or delete it on the computer running the tool. Questions about the channel or uploader can be directed to Halfcut Lab through its TikTok profile.
Other platforms
TikTok processes account data and uploaded content under its Privacy Policy. Changes to this policy will be reflected by the date at the top of this page.