Privacy Policy
Last Updated: November 2025
Important: This is a private, self-hosted application. All data is stored locally on your own infrastructure
and is not shared with any third parties except the social media platforms you explicitly choose to connect.
1. Information We Collect
1.1 Account Information
When you create an account, we store:
- Username (for login purposes only)
- Session data (stored in cookies for 7 days)
1.2 OAuth Tokens
When you connect social media accounts, we store OAuth access tokens and refresh tokens. These tokens allow the application
to post content on your behalf. Tokens are:
- Stored encrypted in your local PostgreSQL database
- Never shared with any third parties
- Only used to authenticate API requests to the platforms you've authorized
- Automatically refreshed as needed
1.3 Upload History
We store records of your uploads including:
- Video file paths (references to files on your NAS)
- Upload configurations (titles, descriptions, tags)
- Upload status and timestamps
- Platform-specific post IDs
2. How We Use Your Information
Your information is used solely to:
- Authenticate you to the application
- Connect to social media platforms on your behalf
- Upload videos to the platforms you select
- Track upload history and status
- Save and load upload presets
3. Data Storage and Security
3.1 Local Storage
All data is stored in a PostgreSQL database running in a Docker container on your own infrastructure. No data is transmitted
to external servers except when making authorized API calls to social media platforms.
3.2 Network Security
The application is designed to run on a Tailscale private network, ensuring that:
- The application is not exposed to the public internet
- Only devices on your Tailscale network can access it
- All connections are encrypted via Tailscale's WireGuard-based VPN
3.3 Session Security
User sessions are managed with:
- HTTP-only cookies (not accessible via JavaScript)
- Secure flag enabled in production (HTTPS)
- 7-day automatic expiration
4. Data Sharing
We do not share your data with any third parties, except:
- Social Media Platforms: When you explicitly authorize uploads, video content and metadata are sent to
the platforms you select (YouTube, Facebook, Instagram, Twitter, TikTok) via their official APIs.
Each platform has its own privacy policy governing how they handle uploaded content:
5. File Access
The application has read-only access to the video directory you configure. It can:
- Browse and list video files
- Read video files for upload purposes
The application cannot:
- Modify or delete your video files
- Access files outside the configured directory
6. Data Retention
Data is retained indefinitely in your local database unless you manually delete it. You can:
- Delete your account and all associated data
- Disconnect platform authorizations (revokes OAuth tokens)
- Clear upload history
- Delete the entire database by removing the Docker volume
7. Your Rights
Since this is a self-hosted application, you have complete control over your data:
- Access all stored data directly via the database
- Export data using PostgreSQL tools
- Delete any or all data at any time
- Modify the source code to change data handling
8. Cookies
The application uses session cookies to maintain your login state. These cookies:
- Are HTTP-only (not accessible via JavaScript)
- Expire after 7 days of inactivity
- Are only sent over HTTPS in production
- Are not shared with third parties
9. Third-Party APIs
The application makes API calls to social media platforms using OAuth 2.0. When you authorize a platform:
- You are redirected to the platform's official authorization page
- You explicitly grant permissions
- The platform returns OAuth tokens to our application
- These tokens are used only for the purposes you authorized
10. Children's Privacy
This application is not directed at children under 13. As a self-hosted application, age verification is not the responsibility
of the system administrator.
11. Contact
For questions about this privacy policy, please open an issue on the GitHub repository.