Privacy Policy
Last updated: 17 August 2026
This policy explains what data NetReps ("we", "the application") handles, why, and for how long. NetReps is a self-hosted publishing tool operated by a single individual to post educational videos to their own social media accounts. It does not offer user accounts and does not serve end users.
Summary
- NetReps has one user: its operator, who is also the owner of the connected accounts.
- We do not collect, request, or process personal data belonging to viewers or any third party.
- The only credentials stored are the operator's own access tokens, held locally on the operator's machine.
- We do not sell, share, rent, or transfer data to anyone.
- This website is static. It sets no cookies and runs no analytics or trackers.
1. Who we are
NetReps is operated by an individual in the United Kingdom. For any privacy question, or to request deletion of data, contact theragingnerd192@gmail.com. We aim to respond within 30 days.
2. What data we handle
2.1 Data from connected social platforms
When the operator connects a social media account (for example TikTok or YouTube), the platform issues an authorisation token. Through that connection the application handles:
| Data | Why it is needed |
|---|---|
| OAuth access token and refresh token | To authenticate upload requests to the operator's own account. Without these, the application cannot publish. |
| Account identifier and display name / avatar | Returned by the platform when checking which account is connected, so the video is posted to the intended account. |
| Account posting eligibility settings | Some platforms require the application to read the account's available privacy options and posting limits before submitting a video, so the upload complies with the account's settings. |
| Publish status of a submitted video | To confirm whether an upload succeeded, failed, or is still processing, and to retry if it failed. |
| Aggregate performance statistics of the operator's own posts | Views, likes and comment counts on our own published videos, used solely to judge which topics to cover next. |
All of the above relates to the operator's own account. The application does not read other users' profiles, followers, comments, private messages, or content, and does not access any other person's data.
2.2 Data we do not handle
- No viewer or audience personal data.
- No contact lists, followers, messages, or private content.
- No payment or financial information.
- No location data, device identifiers, or advertising identifiers.
- No special category data (health, biometrics, political opinions, and similar).
2.3 This website
This site consists of static pages. It sets no cookies, embeds no third-party scripts, and runs no analytics. The hosting server keeps standard web server logs (IP address, timestamp, requested page, user agent) for security and troubleshooting; these are retained for no more than 30 days and are not used to build profiles.
3. Where data is stored
Access tokens and the application's own records (which topics have been published, and statistics for its own posts) are stored locally on the operator's own computer, in the application's working directory. They are not uploaded to any third-party service, database, or cloud storage operated by us. This website and the application are separate: the website stores nothing and has no access to any token.
4. Legal basis (UK GDPR)
Where any personal data is processed, the basis is legitimate interest — operating the operator's own accounts — and, for the platform connection itself, the operator's explicit consent given through the platform's authorisation screen. That consent can be withdrawn at any time (see section 7).
5. Sharing
We do not sell, rent, share, or otherwise disclose data to third parties. Data is transmitted only to the social platform the operator has connected, for the purpose of publishing to that account. Third-party services used in producing videos (an AI text service for drafting scripts and a text-to-speech service for narration) receive only the video script text; they receive no account data, no tokens, and no personal data.
6. Retention
- Access tokens — kept until they expire or the operator disconnects the account, then deleted.
- Post statistics — kept while the relevant video remains published, to inform future content.
- Server logs — maximum 30 days.
7. Withdrawing access and deleting data
The operator can revoke the application's access at any time from the connected platform's own settings (for example, TikTok: Settings and privacy → Security and permissions → Manage app permissions). Revoking access immediately prevents further publishing. Stored tokens are deleted by removing the application's local token files.
To request deletion of any data we hold, or to ask what is held, email theragingnerd192@gmail.com.
8. Your rights
Under UK and EU data protection law you have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. Contact us at the address above to exercise any of these. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk).
9. Children
NetReps is not directed at children. It has no public sign-up and collects no data from anyone other than its operator.
10. Security
Tokens are stored on the operator's own machine with operating system file permissions and are never committed to source control or shared. All communication with platform APIs uses HTTPS. This website is served over HTTPS.
11. Changes
If this policy changes, the revised version will be posted on this page with an updated date. Material changes affecting how data is handled will be reflected here before the change takes effect.
12. Contact
Email: theragingnerd192@gmail.com