01Who we are
lofigangs ("lofigangs", "we", "the app") is a publishing tool operated by Omar Toure, an individual publisher based in France. lofigangs prepares editorial content for Vigneux en Vrai, a local news page covering Vigneux-sur-Seine (Essonne, France), and publishes it to the page's own social media accounts.
lofigangs is used by the page owner only. It is not a consumer product, it has no public sign-up, and it does not process data about the page's readers.
02Scope
This Privacy Policy covers the lofigangs application and the website at https://lofigangs.store. It explains what happens when a TikTok account is connected to lofigangs.
03Data we collect
We only collect what is needed to publish to a connected account. We do not collect data from any other TikTok user.
| Data | Source | Why we need it |
|---|---|---|
| TikTok open ID and union ID | TikTok Login Kit | To identify which account a post belongs to. |
| Display name, username, avatar URL | TikTok Login Kit (user.info.basic) |
To show which account is connected, so the owner does not publish to the wrong one. |
| Access token and refresh token | TikTok OAuth | To publish on the owner's behalf without asking them to log in again. |
| Content we publish: images, videos, captions, privacy setting | Created by the page owner | This is the post itself. |
| Publication identifiers, status and timestamps | TikTok Content Posting API response | To confirm a post went out, and to avoid publishing it twice. |
| Technical logs (execution ID, error messages, timestamps) | Our own servers | To detect and fix failures. |
What we do not collect
- No data about TikTok users other than the connected account holder.
- No follower lists, direct messages, comments, or browsing activity.
- No advertising identifiers, no behavioural tracking, no cookies on this website.
- No payment data. lofigangs is not sold and takes no payment.
04Permissions we request
lofigangs requests the minimum TikTok scopes required to do its job:
- user.info.basic — read the connected account's basic profile so it can be identified in the app.
- video.upload — send a video to the account's drafts for review inside TikTok.
- video.publish — publish an approved photo or video post to the connected account.
These permissions are granted explicitly by the account holder during the TikTok authorisation flow and can be withdrawn at any time.
05How we use the data
- Authenticate with TikTok and keep the connection alive.
- Upload and publish content the account holder has approved.
- Record whether a publication succeeded or failed, and prevent duplicate publication.
- Diagnose technical errors.
We do not use the data for profiling, for automated decision-making with legal effect, or for advertising.
06Legal basis (GDPR)
lofigangs is operated from France and complies with Regulation (EU) 2016/679 (GDPR).
- Consent (Art. 6(1)(a)) — connecting a TikTok account and granting the scopes above. Consent can be withdrawn at any time by revoking the app's access in TikTok.
- Legitimate interest (Art. 6(1)(f)) — keeping short technical logs so the service can be kept working and secure.
07Storage and security
Data is stored on servers located in the European Union: a dedicated virtual server hosted by Hetzner (Germany) and a managed PostgreSQL database hosted by Supabase (EU region). No personal data is transferred outside the European Economic Area.
Access to the servers is restricted to the operator, over authenticated connections. All traffic to and from this website and to TikTok's API uses HTTPS/TLS. Access and refresh tokens are stored in a restricted database table and are never displayed publicly or shared.
08Sharing with third parties
We do not sell, rent, or trade personal data. We do not share it for advertising.
Data is processed by the following service providers, acting on our instructions:
| Provider | Role | Location |
|---|---|---|
| Hetzner Online GmbH | Server hosting | Germany (EU) |
| Supabase | Database and file storage | EU region |
| TikTok / ByteDance | Destination platform for publication | Per TikTok's own policy |
Content that is published becomes public on TikTok and is then governed by TikTok's own Privacy Policy and Terms of Service.
09Retention
- Access and refresh tokens — kept while the account is connected. Deleted within 7 days of disconnection or revocation.
- Profile data (open ID, username, avatar URL) — kept while the account is connected, deleted with the connection.
- Published content and publication identifiers — kept for up to 24 months as an editorial archive, then deleted.
- Technical logs — kept for 90 days maximum.
10Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, and port your personal data, and to object to its processing. You may also withdraw consent at any time.
To exercise any of these rights, email contact@lofigangs.store. We respond within 30 days.
Disconnecting and deleting your data
- In TikTok: Settings and privacy → Security and permissions → Manage app permissions, then remove lofigangs. This immediately invalidates our tokens.
- Optionally, email contact@lofigangs.store to request full erasure of all stored data. We confirm deletion in writing.
If you believe your data has been handled unlawfully, you may lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).
11Children
lofigangs is not directed at children. It is operated by, and used only by, the adult owner of the Vigneux en Vrai page. We do not knowingly collect data from anyone under 18.
12Cookies
This website sets no cookies and runs no analytics or tracking scripts. Web fonts are loaded from Google Fonts, which receives the request IP address as part of serving the font files.
13Changes to this policy
We may update this Privacy Policy. The effective date at the top of this page always reflects the current version. Material changes affecting how personal data is used will be announced on this page before they take effect.
14Contact
Omar Toure — lofigangs
France
contact@lofigangs.store