Effective 28 July 2026
Privacy Policy
Pet Story Creator lets you make a short video from pet media you choose. SNOUTCRAFT LTD, company number 17109338, is the controller for the limited personal data described here.
What we process
Your source photo or video is edited locally in your browser. We receive only the finished video when you choose to save it for TikTok sharing. We also process an opaque session identifier, your terms and minimum-age confirmation, story text, technical media details, security information such as request timestamps and network address, and the TikTok display name, account identifier and authorization tokens provided after you connect TikTok.
Purposes and lawful bases
We process the session, finished video and connected-account data because it is necessary to provide the service you request and perform our contract with you. We process limited security, abuse-prevention and operational records for our legitimate interests in protecting users, platforms and our service. We may retain or disclose limited information where necessary to comply with a legal obligation. We do not use TikTok data to train AI or machine-learning models, sell it, build advertising profiles, or reproduce TikTok's product experience.
Storage and retention
An unfinished upload is held in a private SnoutCraft-controlled Cloudflare R2 quarantine for no more than one day. After file checks pass, the finished video is copied to a separate delivery bucket and automatically expires after seven days. A browser session expires after 30 days. TikTok tokens remain encrypted until you disconnect, delete your data, the session expires, or TikTok removes the authorization. OAuth state is retained for about ten minutes, TikTok webhook records for 90 days, and owner operational records for 180 days. Public Creator sessions, media records and TikTok credentials are excluded from our longer-lived database backups. Security event records contain identifiers and status, not your OAuth token.
Recipients and international processing
We send your selected finished video and the minimum account authorization data to TikTok only when you explicitly request a TikTok upload. TikTok then sends a notification to your Inbox, which you must tap to continue editing and publishing. Cloudflare, Vercel and Supabase process data as hosting, storage and database providers. These providers may process data outside the United Kingdom. Where required, we rely on applicable UK adequacy regulations or contractual transfer safeguards offered by the provider. You may ask us for more information about those safeguards. We do not disclose the data for unrelated purposes.
Children and age
You must be at least 13 to upload a finished video or connect TikTok. If you are under 18, a parent or guardian must approve your use. We apply high-privacy defaults to everyone: source editing stays local, there is no advertising or profiling in the creator, no geolocation is requested, sharing is off by default, and server media expires automatically. If we learn that we hold data from a child under 13, we will delete it.
Your rights
Depending on the circumstances, you may ask for access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You can download without connecting TikTok, disconnect TikTok, or use “Delete my data” at any time. Contact privacy@snoutcraft.com. You may also complain to the UK Information Commissioner's Office at ico.org.uk.
Cookies, automation and security
The creator uses one strictly necessary HttpOnly session cookie. It does not use that cookie for advertising. We do not make decisions about you with legal or similarly significant effects by automated means. We use HTTPS, exact-length short-lived upload links, private upload quarantine, service-only database access, request limits, and authenticated encryption for TikTok tokens.
Contact
SNOUTCRAFT LTD, Suite 1325, 5 Brayford Square, London E1 0SG, United Kingdom. Email privacy@snoutcraft.com.