TikTok

“We may collect biometric identifiers and biometric information as defined under US laws, such as faceprints and voiceprints, from your user content. Where required by law, we will seek any required permissions from you prior to any such collection. We may also collect precise location data, depending on your settings and as explained below. Also, if you choose to enable location services for the TikTok app within your device settings, we collect approximate or precise location information from your device.”

What that means: Your biometric information and exact movements can be collected and utilized by TikTok for profiling and targeted advertising, which poses significant privacy risks.

TikTok collects highly sensitive personal data, including biometric information such as faceprints and voiceprints from user content, and precise location data if enabled in device settings, for various purposes, including demographic classification and ad recommendations.

“We automatically assign device IDs and user IDs, and may use this and other information to identify your activity across devices. Advertisers, publishers, and measurement and other partners provide us with information about you and the actions you have taken outside of our websites and apps, including the pages you visit, products or services you purchase, and apps you download. These partners also provide information such as mobile identifiers for advertising, hashed email addresses and phone numbers, and cookie identifiers, which we use to help measure the effectiveness of ads we serve and to better deliver ads to you on our websites and apps, or through TikTok Ad Network elsewhere online, depending on your ads settings. Some of our advertisers and other partners enable us to collect similar information directly from their websites or apps by integrating our [TikTok Advertiser Tools] (such as TikTok Pixel).”

What that means: Your online behavior, both within and outside of the TikTok ecosystem, is comprehensively monitored to build detailed profiles for highly personalized advertising, significantly diminishing your privacy.

TikTok engages in extensive cross-device and cross-service tracking, identifying users across different devices and collecting data on their activities outside of TikTok apps and websites through third-party partners and its own tracking tools (like TikTok Pixel). This data is used to serve targeted advertising both on and off the platform.

“Some browsers transmit “do-not-track” signals to websites. Because of differences in how browsers incorporate and activate this feature, we currently do not take action in response to these signals. Please be aware that if you choose to refuse, disable, or delete cookies, some of the functionality of the Services may no longer be available to you. Without this information, we are not able to provide you with all of the requested services.”

What that means: You cannot easily opt out of tracking via browser settings like DNT, and attempting to disable cookies may severely limit your use of the service, forcing you to accept data collection to maintain full functionality.

TikTok explicitly states it does not respond to 'do-not-track' signals. It also warns users that disabling cookies or similar tracking technologies may lead to a loss of functionality and an inability to provide 'all of the requested services,' effectively coercing users into accepting tracking.

“We retain information for as long as necessary to provide the Services and for the other purposes set out in this Privacy Policy. We also retain information when necessary to comply with contractual and legal obligations, when we have a legitimate business interest to do so (such as improving and developing the Services, and enhancing its safety, security and stability), and for the exercise or defense of legal claims. If you violate our [Terms of Service], [Community Guidelines], or other conditions or policies, we may remove you from the Services immediately, but may keep information about you to process the violation.”

What that means: Your personal data may be stored by TikTok for an extended, undefined duration, even after you cease using the service, increasing the potential for data breaches or other privacy infringements over time.

TikTok's data retention policy is vague and broad, allowing the company to retain user information for indefinite periods based on 'legitimate business interests' or to address policy violations, even after an account has been terminated.

“We may facilitate the sending of marketing communications to you by sellers, such as by sharing your email address.”

What that means: Your email address may be shared with third-party sellers for their own marketing purposes, potentially resulting in unsolicited communications and increased exposure to third-party data handling practices.

Despite stating it generally does not sell personal information or share it for cross-context behavioral advertising where prohibited by law, TikTok explicitly allows for sharing users' email addresses with sellers for direct marketing communications, provided the user gives consent.

“We may update this Privacy Policy from time to time. When we update this Privacy Policy, we will notify you by updating the “Last Updated” date at the top of the new Privacy Policy, posting the new Privacy Policy, or providing any other notice required by applicable law. We recommend that you review this Privacy Policy regularly to stay informed of our privacy practices.”

What that means: The terms dictating how your personal data is handled can change without direct or prominent individual notice, requiring you to constantly monitor the policy to understand your current privacy rights and TikTok's practices.

TikTok retains the right to modify its Privacy Policy at any time, typically by simply updating the 'Last Updated' date or posting the revised policy. The responsibility is placed on the user to proactively check for these updates to remain informed.

“Users of the Services who are California residents and are under 18 years of age may request and obtain removal of user content they posted by contacting us at: [https://www.tiktok.com/legal/report/privacy]. ... Please note that your request may not ensure complete or comprehensive removal of the material. For example, user content that you have posted may be republished or reposted by another user.”

What that means: Even after you attempt to delete your own content, it may remain publicly accessible on the platform or on other sites if it has been re-shared, limiting your ability to fully control the dissemination of your personal information.

While TikTok provides mechanisms for content removal, particularly for users under 18 in California, it explicitly states that such requests 'may not ensure complete or comprehensive removal' if the content has been re-shared or republished by other users.