Effective September 12, 2026.
FDF Publisher is a publishing and scheduling tool for creators and brands who manage their own TikTok accounts. It is operated by Scene Lab. This policy explains what the app handles when you connect an account to it, and what it never does.
When you authorize an account on TikTok’s consent screen, the app receives and holds a TikTok access token for that account. Using it, the app reads the profile fields and statistics TikTok returns for that account: display name, username, avatar, bio, profile link, follower, following, like and video counts, and the account’s own public video list with each video’s views, likes, comments and shares. The app also holds the videos and captions you upload to publish, together with the posting settings you chose for them.
For one purpose: to publish and schedule posts on your behalf, and to show you the connected account’s numbers. Nothing is collected for advertising, profiling or resale.
On the operator’s own server, which runs the app. Access tokens are kept in a file that is never shared, never displayed in the interface and never written into logs. Videos you upload are stored on that same server until they are published.
Account data and the access token are kept until you disconnect the account in the app or revoke the app’s permission in TikTok, whichever comes first. An uploaded video is deleted once its post has been published, or immediately if you delete the post.
No one. Your data is not sold, rented, traded or shared with any third party. The only outside service it is sent to is TikTok, and only to carry out the actions you asked for: reading your account and publishing your posts.
The app sets one session cookie so that your browser stays signed in to it. There are no analytics, no advertising pixels and no tracking cookies of any kind.
You can disconnect an account in the app at any time. You can also revoke the app’s permission from TikTok itself, under Settings and privacy, Security and permissions, Manage app permissions. Revoking there invalidates the stored token immediately.
To have everything held for your account deleted, email coltugc@gmail.com and it will be removed. Use the same address for any question about this policy.
