Privacy Notice

Privacy practices for pasteaclip, an individually operated service in Indonesia, including processing, retention and user rights.

Who operates the service

Paste a Clip is operated by an individual under the operating name pasteaclip in Indonesia. Support: [email protected]. Privacy, legal and copyright requests: [email protected].

Data and purposes

We process the submitted public TikTok URL, normal request headers and technical request data to validate links, resolve metadata, secure the service and deliver requested formats. We do not request TikTok login credentials or cookies.

Providers and international processing

The backend may send the submitted URL and necessary technical data to third-party infrastructure and the TikWM parsing service. TikWM and media/CDN services may process technical data outside your country under their own practices. Processing is not entirely local.

Storage and retention

Raw TikTok URLs are not durably stored by default and diagnostic values must be hashed, truncated or redacted. Parser request logs are retained 30 days; security, abuse, Provider lease/audit and aggregate delivery logs are retained 90 days. Metadata memory cache lasts at most 600 seconds and media-resolution data at most 120 seconds. Downloaded media is not permanently stored.

Optional first-party product analytics

Product analytics remains off unless you explicitly allow it. If allowed, we store closed categories for the landing page, source channel, locale, device class and product step, plus short-lived random session/flow identifiers and coarse error/result categories. We do not store full referring URLs, submitted TikTok links, media, text entered in the Editor, raw IP addresses, full user-agent strings or advertising identifiers. A server resolve result may be recorded only for the same consented resolve request. A download click or delivery start is not treated as proof that a file was saved. Raw events are retained for up to 7 days and identifier-free daily aggregates for up to 180 days. You can turn analytics off in Privacy settings without affecting the service.

Security and rights

We use HTTPS, access controls, bounded requests, secret separation and redacted audit records. You may request access, correction or deletion where applicable by contacting [email protected]. This general-audience service is not directed to children under 13. You must be at least 13 and meet any higher minimum age required where you live.

Changes

Last updated: 12 October 2026. Material changes will be posted on this page before they take effect.

Product limitations