Privacy Policy

1. About this policy

This Privacy Policy explains how TikTok Translate handles information when you use our Chrome extension, its associated translation and account services, and tiktoktranslate.com. References to “we,” “us,” and “our” mean the operator of TikTok Translate. For privacy questions or requests, contact support@tiktoktranslate.com.

TikTok Translate is an independent product and is not affiliated with, sponsored by, or endorsed by TikTok. TikTok’s own collection and use of information are governed by its policies.

2. Information we handle

Account and authentication information

When you register or sign in, we receive your email address and password. The service stores an account identifier, your email address, a salted password hash, creation time, verification status, and hashed authentication-session identifiers with expiration times. Passwords are processed for authentication and are not stored as plaintext. We process verification codes entered by you and store a salted hash of an outstanding code, its expiration, and attempt information.

Account activity, approximate location, and administration

When you use an account, we record the time of your last authenticated activity and related account status information. Where available, the service may associate an approximate country, region, or city with your account based on network information; this is not GPS or precise device location. Authorized administrators can view account email addresses, registration and verification status, whether an account has an unexpired session, recent activity timestamps, available approximate location, and whether an account is disabled. Administrators can export this account information to a CSV file, change an account email address (requiring new verification and revoking existing sessions), enable or disable accounts, send password-reset emails, and delete accounts. Administrative actions are recorded in an audit log with the administrator and target account identifiers, action type, and time.

Comments and translation results

The extension reads comment text from supported areas of TikTok’s website. When you request a translation, it sends the comment, your selected target language, and available nearby parent-comment context to our service. Automatic translation sends visible comments as you scroll when that option is enabled. We process the resulting translation, detected language, and any explanatory note. A comment can contain personal information posted by you or someone else, so avoid translating sensitive content you do not want sent for processing.

Local extension storage

The extension stores your session token, account information, translation language, automatic-translation preference, and service address in Chrome extension storage. Session storage is restricted to trusted extension contexts. Your password is not saved in extension storage.

Technical, usage, and security information

Our service and infrastructure providers process network and request information such as IP addresses, request times, requested service paths, response statuses, and browser or device information where provided. The application uses hashed identifiers derived from request IP addresses and account details for abuse prevention and rate limiting. We also retain usage counters to enforce translation quotas. IP addresses can indicate an approximate location; the extension does not request access to GPS or precise device location.

Password resets

When an administrator initiates a password reset, we generate a single-use, time-limited reset link sent to your registered email through Resend. The service stores a hash of the reset token, its expiration, and whether it has been used, rather than storing the token itself as plaintext. The reset link expires after 30 minutes. Completing a reset changes your password hash and revokes existing account sessions.

Support correspondence

If you submit the website Support form, we receive your name, email address, selected topic, message, and a submission identifier. Your email becomes the reply address so we can respond. If you email us directly, we receive the content and information included in that correspondence. Please do not include passwords, verification codes, session tokens, or API keys.

3. How we use information

We use information to provide translations, preserve preferences, create and authenticate accounts, verify email addresses, apply usage limits, prevent abuse, troubleshoot service issues, respond to support and privacy requests, maintain service security, support authorized account administration and audits, and measure use of our website. We do not use your TikTok comments to build advertising profiles or train our own general-purpose AI models.

The Chrome extension does not request your TikTok password, read TikTok direct messages, collect your general browsing history, or include Google Analytics tracking code. Its content access is limited to the supported TikTok website. Website Analytics and Support-form bot protection are described separately below.

4. Service providers and other disclosures

We share information as needed to deliver the functions described in this policy:

• AI translation processing: our configured AI processing provider, and any service gateway used to reach it, receives comment text, the target language, and available parent-comment context to generate translations. We do not include your account password, verification code, or extension session token in the translation prompt. Provider processing and retention depend on the applicable service terms and account configuration. Contact Support for information about the AI processing provider currently used by the service.
• Railway and hosting infrastructure: Railway hosts our API and database. Website hosting, delivery, and related infrastructure providers process information necessary to serve the website, downloads, and API requests and to operate their services.
• Resend and email services: Resend processes recipient addresses and message contents to deliver verification codes, password-reset links, and Support messages. Support emails and replies are also handled by the providers serving our support mailbox and your email account.
• Google Analytics: Google processes website measurement information as described in Section 5.
• Cloudflare Turnstile: Cloudflare processes verification information as described in Section 6.

Service providers handle information under their applicable terms, policies, and service arrangements. We may also disclose information when required by law, to protect rights and security or investigate abuse, or in connection with a business transfer subject to applicable protections and the Chrome Web Store’s permitted-use restrictions. We do not sell personal information or transfer extension user data for unrelated advertising or creditworthiness and lending decisions.

5. Website Analytics and cookies

Our custom-domain website uses Google Analytics to understand visits and website usage. Google Analytics can use cookies and browser identifiers and process device, browser, page, referral, and interaction information. Google may derive approximate geography from network information. It loads on tiktoktranslate.com and www.tiktoktranslate.com when those pages are visited unless blocked by your browser or privacy tools. The hosted preview is excluded.

Our tag configuration disables Google signals and advertising personalization and removes query parameters and fragments from the initial page-location and referrer values supplied by our code. Our code does not send Support field values, account credentials, verification codes, or translated comments as Analytics event parameters. Google’s own measurement behavior and retention also depend on the Analytics property settings and its services.

You can manage cookies through browser settings, use browser privacy controls, or use Google’s Analytics opt-out tool. These choices may affect measurement without changing the extension’s translation functionality. Read Google’s Privacy Policy for information about its processing.

6. Support-form human verification

The website Support form uses Cloudflare Turnstile to help distinguish legitimate submissions from automated abuse. The widget processes browser, device, network, and interaction signals and supplies a short-lived verification token. Our server validates that token with Cloudflare before sending a new Support email. Tokens are not included in Support emails or stored in our application’s delivery-receipt cache.

If verification is unavailable, you can contact support@tiktoktranslate.com directly. See Cloudflare’s Privacy Policy.

7. Retention

• Account records: retained while your account remains active and as reasonably needed to operate the service, address security issues, handle requests, and meet applicable obligations. Account records do not currently have an automatic deletion date.
• Account activity and administrative records: last-active timestamps, available approximate location, account status, and administrative audit entries are maintained for service operation, security, and account management. We do not promise a fixed automatic deletion period for these records.
• Password resets: reset links expire after 30 minutes and are single-use. Used or expired records may remain until later maintenance; a new reset request replaces earlier outstanding reset records for that account.
• Sessions: expire after 30 days unless revoked sooner. Expired records are removed during later session-maintenance operations.
• Verification codes: expire after 15 minutes and have limited verification attempts. Code records are removed after successful verification or replaced when a new code is issued; expiration does not necessarily mean immediate physical deletion.
• Translation cache: cached translation results expire after 24 hours and are scoped to the account and language. Cache keys use hashed inputs rather than storing the original comment as a separate key. Expired records become unavailable for cache retrieval and are removed on later cache writes.
• Support receipts: the application caches a submission hash and delivery reference for up to 24 hours to prevent duplicate sends. It does not store the plaintext Support message in this cache. The email remains in the support mailbox and email-provider systems as needed to handle correspondence and related obligations.
• Usage and security records: retained as needed for quotas, security, diagnostics, and operational purposes. Some usage counters have no automatic expiration; rate-limit records are cleaned during later rate-limit operations.
• Provider records and backups: logs, Analytics records, email records, AI-processing records, and backups may have different retention schedules under the relevant provider’s configuration and policies. An application record’s expiration does not guarantee immediate removal from provider logs or backups.

8. Your choices and privacy requests

You can change the target language, disable automatic translation, translate comments individually, and sign out through the extension. Signing out removes the locally stored session and account information and attempts to revoke the server session. Uninstalling the extension removes its local extension storage; it does not delete your server account or previously delivered emails.

To request access to, correction of, or deletion of your account or other personal information, email support@tiktoktranslate.com, preferably from your registered email address. We may need information to verify your identity and locate the relevant records. Account deletion requests are handled through Support rather than an in-app self-service control; authorized administrators can also delete accounts. Deleting an account does not necessarily immediately remove records held separately in administrator audit logs, infrastructure logs, email-provider systems, or backups. We will address requests subject to applicable law and may retain information needed for security, legal obligations, or resolving disputes.

Depending on your location and applicable law, you may have additional rights relating to access, portability, objection, restriction, withdrawal of consent where processing relies on consent, or complaints to a data protection authority. Contact us to exercise applicable rights. Deleting TikTok Translate data does not remove the original comments from TikTok.

9. Chrome Web Store Limited Use

TikTok Translate’s use of information received through the Chrome extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Extension user data is used only to provide or improve its disclosed translation features and related operation and security. Transfers are limited to permitted purposes, such as providing those features, security, legal requirements, or a permitted business transfer.

We do not use or transfer extension user data for personalized, retargeted, or interest-based advertising, or to determine creditworthiness or for lending purposes. Human access to extension-derived content is limited to permitted circumstances, such as your explicit agreement to review a specific issue, security investigations, legal requirements, or aggregated and de-identified operational information. Support messages you choose to send are read as needed to address your request.

10. Security

The extension communicates with our service over HTTPS. Passwords and outstanding verification codes are stored using salted one-way hashes, and server-side session records store token hashes. We limit extension permissions and restrict local session storage to trusted extension contexts. The service also uses validation, quotas, and abuse controls. No security measure guarantees absolute protection; avoid including sensitive information in comments you submit for translation or in Support messages.

11. International processing

Our service providers may process or store information in the United States and other locations where they operate. These locations may have different privacy laws from your location. Where applicable law requires protections for international transfers, those requirements apply to the relevant processing arrangements.

12. Children

TikTok Translate is not intended for children under 13. We do not knowingly collect their personal information. If you believe a child under 13 has provided personal information to us, contact Support so we can investigate and take appropriate action. Users must also satisfy applicable age requirements for TikTok and the services they use.

13. Changes and contact

We may update this policy when our practices or services change. The effective date at the top identifies the current version. Material changes will be communicated through the website or other appropriate notice, and additional consent will be requested where required.

For privacy questions, account deletion, or information about our processing providers, email support@tiktoktranslate.com. Resend’s processing is described in its Privacy Policy.