GamingBroject Publisher, Privacy Policy
Effective date: 14 September 2026.
Operator and scope
GamingBroject, Panos Kapetanakis operates GamingBroject Publisher and is responsible for the personal information processed by its internal TikTok integration. Contact: contact@gamingbroject.com.
This notice covers registered test-account holders and authorized editors using the Publisher. It does not replace the privacy information for unrelated website features. The TikTok integration remains in restricted sandbox testing; it is not a public account-management service.
Information used
- Connected-account information: TikTok’s application-specific account identifier, display name and basic profile response, which may include an avatar URL. We obtain these from TikTok after authorization.
- Connection credentials: access and refresh tokens, their expiry information, and the permissions granted. The integration does not request or store your TikTok password.
- Selected content: the images or video, media URLs, title and caption an editor chooses to upload. Do not include private or sensitive information in this material.
- Operational records: the relevant WordPress editor and article identifiers, authorization and upload timestamps, delivery identifiers, status responses and diagnostic errors. WordPress and hosting security systems may also record requests and network information such as IP addresses.
Purposes and permissions
We use this information to identify the connected account, maintain the authorized connection, perform selected draft uploads, check delivery status, prevent accidental duplicate sends, and investigate errors or security incidents. The sandbox requests user.info.basic and video.upload. It does not request access to your private messages, contacts, or follower list.
Account connection and optional content transfers are based on your consent. Necessary access-control, security and delivery records support our legitimate interests in operating a safe editorial workflow. Any processing required by applicable law is limited to that requirement. An API permission is not permission to publish unrelated content or use account data for unrelated purposes.
We do not use this integration to sell TikTok account information, build advertising profiles, or make solely automated decisions with legal or similarly significant effects on people.
Recipients and hosting
When an editor requests an upload, the selected media, title and caption are transferred to TikTok together with the authorization needed to process the request. Media delivered by URL must be retrievable by TikTok; use only material intended for that transfer. TikTok handles received information under its own privacy policy and terms.
The Publisher operates on GamingBroject’s WordPress and hosting infrastructure provided through GoDaddy. Authorized site administrators and technical maintainers may access information when necessary for support and security. The TikTok API credentials are stored encrypted in the WordPress configuration database. Encryption reduces risk but does not mean that a server administrator has no access.
Hosting, platform processing and support may involve processing outside your country, including outside the European Economic Area. GoDaddy’s published Data Processing Addendum describes its handling of customer personal data and the transfer mechanisms applicable to its services. TikTok separately processes the account and content information it receives under its own terms and privacy notice. Contact us for information about recipients and safeguards relevant to a particular transfer. This notice does not claim that all data stays in one country.
Retention and removal
Connection credentials are used while the connection is authorized and needed. Revoking authorization in TikTok stops the authorization there; it does not by itself erase every locally stored record. Contact the operator to remove the saved connection and account identifiers. The current integration does not implement automatic deletion of all historical connection, media or delivery records.
Retention is reviewed when sandbox testing ends, when an account is disconnected and when a deletion request is received. Prepared media and delivery records are kept only while needed to manage the selected content, prevent a duplicate upload, resolve a specific incident or meet a legal obligation. Information no longer needed for these purposes is removed or de-identified by an administrator. This is a manual review process, not an automatic erasure timer. Backup copies are restricted to recovery use and must be considered during that review; they are not reused for new uploads, and completed deletion requests must be reapplied if a backup is restored. Contact us for the retention decision for your particular record.
Your choices and rights
You may decline the connection, stop requesting uploads, and revoke the Publisher’s permissions in TikTok. Withdrawal does not make earlier lawful processing unlawful. It also does not delete content already stored or published by TikTok; manage that content through TikTok.
Where applicable, you may request access, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Contact the operator using the email above. We may need proportionate information to verify a request, but will not ask you to send a password or authentication code. You may also complain to your competent data-protection authority, including the Hellenic Data Protection Authority if appropriate.
Website storage and changes
WordPress authentication and security features use necessary storage. This integration does not require accepting optional analytics. Public-site analytics choices remain separate and must not be bypassed to connect or upload. If the integration’s purposes, permissions or recipients change materially, this notice must be updated and any required consent obtained before that change is used.
Related document: GamingBroject Publisher Terms of Service.