Privacy policy

Controller

The controller within the meaning of the GDPR is Portionscore UG (haftungsbeschränkt), represented by Jonathan Schäfer, Paul Hummel.

Hornbühlstraße 5
79117 Freiburg im Breisgau
Germany

Send privacy requests to support@viewthrough.app. Full provider details are listed in the imprint.

What this is about

Viewthrough records the performance data of public TikTok posts by creators who have explicitly connected their TikTok account for this purpose. The goal is to evaluate which content performs how well.

What data we process

Account data

• Email address (for signing in via link, no password)
• Display name

TikTok data

After a TikTok account is connected, we retrieve the following via the official TikTok Display API:

• Profile data: open_id, union_id, display name, profile picture
• For each public post: identifier, publication time, description, title, duration, image dimensions, thumbnail, links
• Metrics: views, likes, comments, shares — repeatedly, to show how they develop over time

We only read data. We do not publish, change or delete anything on TikTok. We only request the permissions user.info.basic and video.list.

Self-reported information

• Total daily views per account
• Weekly country distribution of viewers, optionally with a screenshot from TikTok Analytics as evidence

Technical logs

For troubleshooting, we store the responses of the TikTok API. Access and refresh tokens are removed before anything is stored.

How we protect access tokens

TikTok access and refresh tokens are stored encrypted with AES-256-GCM. The key exists only in the server environment, never in the database. Tokens are never sent to the browser and never written to logs.

Retention

Metric histories are kept permanently because they are the basis of the analysis and cannot be reconstructed. From the hourly retrievals we do not store raw responses — only time, status, error code, duration and TikTok's request ID. A complete raw response is only kept when a founder retrieves it specifically for troubleshooting.

A creator can disconnect at any time in the application. We then revoke access at TikTok and delete the stored tokens; retrieval stops immediately. Histories recorded up to that point are kept. Consent can also be revoked directly in the TikTok settings. Under Settings → Account, you can delete your own access; founders can delete their organization there, including all recorded data, immediately and permanently. To have a creator's recorded histories deleted, a message to the address above is also sufficient.

Sharing

We do not sell data and do not share it for advertising purposes. Service providers we use:

• Supabase — database and sign-in, data center in the EU
• Vercel — hosting of the application

Your rights

Access, rectification, erasure, restriction, data portability and objection. A message to the address above is sufficient.