Privacy Policy

Effective 21 October 2026 · Applies to NextPlay Clip Studio and this website.

NextPlay Clip Studio (“NextPlay”, “we”, “us”) is a desktop application for preparing and publishing rights-cleared sports clips. This policy explains what data the app accesses, where it is stored, and how you can delete it. It covers both the desktop app and this website.

1. Who is responsible

The app is operated by the NextPlay Clip Studio project. For privacy questions or requests, contact nextplayclipstv@gmail.com.

2. Data we access from TikTok

NextPlay only accesses TikTok data after you explicitly authorize the app through TikTok's Login Kit. The scopes we request are limited to what the publishing workflow needs:

Scope	Data	Why
`user.info.basic`	Open ID, display name, avatar, follower count	Show which TikTok account is connected before a post is published.
`video.publish`	Creator info, privacy options, interaction settings, video publishing	Render the approval screen, upload the video you confirm, and check publish status.
`video.list`	Your public video list and engagement counts	Pull performance metrics so the app can report what worked and improve future edits.

We do not request your TikTok password. Authorization happens on TikTok's own domain. The app receives an access token and a refresh token, which it stores locally as described below.

3. Data stored on your computer

NextPlay is local-first. The desktop app stores the following on the machine where you run it:

OAuth tokens in data/tokens.json, used to call TikTok on your behalf.
Account and post metadata in a local SQLite database, including the connected open ID, post captions, scheduled times, publish IDs, and performance metrics.
Video and audio files that you import or render, in your local project folders.
Credentials for your own TikTok developer app in a local, gitignored .env file.

This data stays on your machine. NextPlay does not operate a central server that receives your footage, tokens, or metrics. API requests go directly from your computer to TikTok.

4. This website

This website is a static informational site. It does not set cookies, run analytics, or include advertising trackers. Our hosting provider may process standard technical logs (such as IP address, user agent, and requested URL) to serve and secure the site.

5. How we use data

To authenticate your TikTok account and display the correct creator profile.
To show the privacy and interaction options TikTok returns for your account.
To upload and publish only the video you review and confirm.
To poll TikTok for publish status and surface errors.
To retrieve performance metrics for posts you published, and to improve future edits.

We do not sell personal data, use it for advertising, or share it with data brokers. We do not use TikTok data to train third-party models.

6. Sharing

Data is shared with TikTok only as necessary to perform the actions you request (authorize, publish, and read your own video metrics). We do not share it with any other third party except where required by law or to protect the security of the service.

7. Retention and deletion

Tokens remain until you revoke the app in TikTok or delete data/tokens.json. Revoking access in TikTok invalidates the tokens immediately.
Local account and post data remains in your project database until you delete it. You can delete the database file or individual rows at any time.
Video files remain in your local folders until you delete them.
Website logs are retained by the hosting provider for the short period needed for security and operations.

To disconnect TikTok, open TikTok's Settings and privacy → Security and login → Manage app permissions and remove NextPlay. To delete local data, remove the data directory in your NextPlay project. You can also email us to ask what data is associated with your connection; because the app is local-first, we typically hold no server-side copy.

8. Security

The app uses OAuth 2.0 with PKCE, verifies the OAuth state value, binds its local callback and approval server to 127.0.0.1, and stores tokens in a file that is excluded from version control. You are responsible for protecting access to your computer and your TikTok developer credentials. If you believe a token or client secret has leaked, revoke the app in TikTok and rotate the secret in the TikTok developer portal.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, or to object to certain processing. Because NextPlay is local-first, most of these actions are under your direct control in the app and in TikTok's settings. You can also contact us at the email above and we will help to the extent we hold any data.

10. International transfers

TikTok processes data in accordance with its own privacy policy and may transfer data internationally. NextPlay does not add a separate transfer of your data to another country; the app runs where you run it.

11. Children

NextPlay is not directed to children under 13 (or the minimum age required by TikTok in your region). We do not knowingly collect data from children. If you believe a child has used the app, contact us and we will help remove the local data.

12. Changes

We may update this policy when the app or TikTok's requirements change. The effective date at the top of the page will change, and material changes will be described here. Continued use after an update means you accept the revised policy.

13. Contact

Questions, access requests, or deletion requests: nextplayclipstv@gmail.com.