1. Who operates the service
Time2shine, based in France, operates T2S Live Studio and this website and is the contact for the processing described here. Privacy requests: accessdenied.info@gmail.com.
This policy covers creator sign-in, LIVE community records, local desktop data and this download website. A creator’s own overlays, rewards and other uses of exported information may involve separate processing for which that creator is responsible.
2. Information we process
| Source | Information and purpose |
|---|---|
| TikTok sign-in | TikTok’s application-specific account identifier (open_id), username and display name, used to identify the creator, associate the account with an approval decision and restrict access to that creator’s records. |
| Service access | Creator approval status, account timestamps and a hashed application session credential with its expiry and revocation status, used to enforce approved access. |
| Public LIVE interactions | Viewer usernames, identifiers when available, nicknames, avatar information, comment content and event metadata such as likes, gifts, coin counts, follows, event time and stream identifiers, obtained from the creator’s public LIVE activity. Used for community counters, points and connected displays. |
| Points and cards | Balances, score changes, interaction history, card preferences and card requests associated with the creator and viewer, used to maintain the creator’s community records and deliver requested displays. |
| Your computer | Settings, profile caches, queued events and an encrypted application session. Diagnostic logs appear in the app and can be exported by the user. |
| Website and infrastructure | Hosting and network services can process IP addresses, request metadata and technical logs to deliver the website, downloads and API, and to protect their availability. Emails you send us contain the contact and support information you choose to provide. |
3. Purposes and legal grounds
Creator account verification, access administration and requested features support the service provided to approved creators. We rely on performance of that service agreement where applicable. Processing public LIVE community interactions and protecting the service support legitimate interests in community scoring, operating the requested displays and preventing misuse, taking account of viewer rights.
TikTok asks you to authorise the requested profile permissions in its own sign-in flow. Without that information we cannot verify your creator account through TikTok. We do not receive your TikTok password, private messages or payment-card details. The application does not record LIVE video or audio.
Community scores are calculated from events and creator settings. They do not determine legal rights or similar significant entitlements. Creator approval is administered by Time2shine; TikTok sign-in alone does not decide access.
5. How long information is kept
- TikTok credentials: the API uses the TikTok access token to verify the account during sign-in. TikTok access and refresh tokens are not persisted as the application’s session.
- Application sessions: access expires after 24 hours. Signing out revokes the session. Expired or revoked server session records can remain until maintenance; access expiry is not automatic record deletion.
- Creator and community records: approval records and points history are retained while needed to operate the creator’s account and maintain its community history. There is currently no automatic scheduled purge of these records. Requests for deletion or restriction are handled through the contact address above, subject to necessary legal or security retention.
- Local data: settings, caches, pending events and rejected-event diagnostics can remain on your computer until you remove them. Successfully delivered queued events are removed from the queue. Exported logs remain wherever you save them. Uninstalling may leave the profile folder behind.
- Technical and support records: kept for the periods needed by the relevant provider or to resolve the support request and meet applicable obligations; contact us for information relevant to a specific record.
6. Security and your choices
Online API connections use HTTPS. The Windows application protects saved access credentials using Windows data protection. The server stores a hash of its application session credential and checks account approval when requests are made. These measures reduce risk but do not guarantee absolute security.
You can sign out in the application and remove its permission in your TikTok account settings. Signing out ends app access; it does not automatically remove TikTok’s permission or delete points history. You can stop local collection by disconnecting the LIVE connection.
7. Your privacy rights
Where applicable, you may request access, correction, deletion or restriction of your personal data, object to processing based on legitimate interests, and request portability of data eligible for that right. Contact accessdenied.info@gmail.com, identifying the relevant creator or viewer account and the request. We may ask for information needed to verify your identity. We normally respond within one month, subject to permitted extensions.
You may also complain to the French data protection authority, the CNIL, or your competent local authority. A viewer can contact us directly about information held in the service; requests concerning a creator’s separate overlay or export can also be addressed to that creator.
8. Website, children and changes
This website does not add advertising, analytics trackers or non-essential cookies. Its hosting platform may use technical mechanisms needed to deliver or secure the site. Downloading the installer does not sign you in to TikTok; sign-in is initiated separately inside the desktop application.
Your language preference is stored only in your browser.
The service is intended for creators who satisfy TikTok’s applicable account and LIVE eligibility requirements. We do not knowingly solicit children’s information through this website. Contact us if you believe inappropriate personal data has been collected.
We update this policy when relevant processing changes. The effective date identifies this version; material changes will be communicated through an appropriate service channel where required.