Privacy Policy
Last updated: October 25, 2026 • Operated by Viditok • Governing Jurisdiction: Canada
1. Who Operates Viditok
Viditok (“the Service”) is operated by Viditok under the laws of Canada. For all data protection and privacy inquiries, you can reach our team directly at privacy@viditok.com.
2. Technical Data We Process
Viditok is intentionally built with privacy-first engineering:
- IP Addresses (HMAC Pseudonymized): Client IP addresses are never logged or stored on persistent disk. To prevent abuse and enforce operational rate limits, IP addresses are pseudonymized in volatile RAM using HMAC-SHA256 with an ephemeral 32-byte secret key regenerated at every server restart. Pseudonymized counters are cleared within a rolling 10-minute window.
- Submitted URLs: When you submit a public video link, that URL is transmitted to upstream retrieval endpoints and to
tiktok.com/oembedsolely to resolve metadata and stream locations. We do not maintain a database linking submitted URLs to visitors. - Video Thumbnails: Media thumbnails and author avatars are loaded directly by your browser from third-party content delivery networks (CDNs). Those third-party CDNs receive your browser request and IP address directly according to their respective privacy policies.
- Aggregated Operational Statistics: We maintain aggregated hourly and daily counters (such as tool usage counts and HTTP status codes) in an internal SQLite database. These counters contain zero personal data, zero IP addresses (not even hashed), and zero submitted URLs.
3. Cookies and Local Storage
Viditok uses Google Analytics (GA4) with Google Consent Mode v2 to evaluate aggregate website traffic and usage metrics without identifying individual users.
- Visitor Cookies: Analytics cookies (_ga, _ga_*) are strictly gated by prior consent and default to denied. If you decline or ignore the cookie banner, no analytics cookies are written and IP addresses are masked. If accepted, anonymous statistical cookies help us identify aggregated page views and device performance.
- Local Storage: We use your browser’s
localStoragesolely to remember your color scheme preference (“theme”) and your cookie consent preference (“user_consent”). - Administrative Cookies: An encrypted session cookie is issued strictly to authenticated administrative operators accessing the private administration portal. This cookie never applies to public visitors.
4. Advertising
Viditok currently operates without third-party advertising networks. No third-party ad scripts, marketing pixels, or tracking iframes are loaded on any public pages.
5. Hosting and Infrastructure
Viditok is hosted on dedicated cloud infrastructure provided by OVHcloud at data center facilities located in Canada. Your technical traffic is secured with TLS encryption (HTTPS via modern Caddy web server).
6. Your Privacy Rights
Because we do not maintain accounts, profiles, or persistent logs of visitor activity, we do not possess identifiable personal records to export or delete in normal course. However, if you believe any data concerning your interaction has been retained, you may contact our privacy coordinator at privacy@viditok.com.