Legal

Privacy Policy

Last updated: September 17, 2026

This Privacy Policy describes what personal data TikForge collects, why, with whom it shares it and how long it keeps it, when you use the site tikforge.net and its subdomains, the desktop app, the games, mods, plugins, overlays and the TikForge Discord server. Processing is carried out in compliance with Regulation (EU) 2016/679 ("GDPR") and the Italian Personal Data Protection Code (Legislative Decree 196/2003).

1. Data controller

TikForge

Registered office: Rome, Italy

E-mail: tikforge@outlook.com

Website: https://tikforge.net

2. Data we collect

Account

• email address and the date it was verified;
• password, stored only in encrypted form (hash), never in plain text;
• first name, last name and display name, if you enter them;
• the TikTok username and Roblox ID you type in, and the public TikTok profile picture associated with the username;
• registration date, last login, role, any agency and the referral code used at registration.

TikForge never asks for or receives the passwords of your TikTok, Roblox or Discord accounts.

Subscription and payments

• plan, pass or code activated, start and expiry dates, renewal status;
• PayPal subscription or order identifiers, amount, payment method and date;
• the checkbox with which, before paying, you requested immediate access, waiving the right of withdrawal.

Card and account data are processed by PayPal: TikForge does not receive them.

TikTok LIVE streams and configuration

• the public events of your LIVE: gifts, likes, followers, shares and comments, with the public name, username and profile picture of whoever sends them;
• session statistics and leaderboards (for example who sent the most gifts or likes), shown in the overlays;
• the profiles, actions, events, overlays, text-to-speech settings and web game progress you configure;
• images, videos, audio and logos you upload, and the Minecraft packs you create;
• the tokens that link your Minecraft servers, games and overlays to your account, and their connection status.

About the data of your LIVE's viewers: this is data that they themselves make public on TikTok. TikForge uses it only to make your LIVE's interactions work and does not use it for other purposes.

Discord and support

• if you link Discord: Discord ID and username, link date and subscriber role status;
• if you open a ticket: the messages, the email you provide and the ticket transcript, which remains on the TikForge Discord server;
• the messages you send by email.

Agencies and referrals

• for agencies: name, contact email, TikTok profile, description and logo, the invitations sent to creators and their replies;
• for referral codes: which accounts registered with the code.

Technical and security data

• IP address, browser, operating system, date and time of requests, recorded by our hosting providers;
• login attempts (email used, IP address, outcome), to block attacks on passwords;
• on your PC, the app stores the login session, settings and a small log file, which are not sent to us.

Business contacts

To propose TikForge, the staff may note the name, public social profile and publicly listed email of creators and agencies that are not yet users, together with the history of contacts. Anyone contacted may ask at any time not to be contacted again and to have their data deleted by writing to tikforge@outlook.com.

3. Why we use the data and legal basis

We do not use the data for targeted advertising, we do not sell it and we do not make automated decisions that produce legal effects on you.

4. Providers the data is passed to

To deliver the service we rely on these providers, which process data on our behalf or as independent controllers, only to the extent necessary:

• Railway — hosting of the backend, the database and the Discord bot;
• Netlify — hosting of the site;
• PayPal — payments, subscriptions and passes (independent controller for its own data);
• Resend — sending emails (verification and reset codes, receipts, reminders);
• Discord — community server, support tickets, account linking and subscriber role;
• Anthropic — automated ticket assistant: receives the ticket messages and your account status (plan and expiry) in order to reply;
• Google Cloud Text-to-Speech — cloud voice synthesis: receives the text to be read, for example LIVE comments;
• Euler Stream — technical service used to connect to the TikTok LIVE: receives the TikTok username;
• Jina AI — used only as a fallback to read the public information of the TikTok LIVE when the direct connection fails: receives the public address of the TikTok profile;
• TikTok — from which the public events of the LIVE and profile pictures are received;
• Roblox — Roblox games and the upload of the gift images used in the games;
• GitHub — distribution of the app and its updates;
• Google Fonts — typefaces of the site and the app (receives the IP address).

From your PC, the app may also directly contact: Google Translate (free synthesized voice, receives the text to be read), MyInstants (sound effect search), PaperMC (Minecraft server download) and PayPal (payment page).

Who else sees your data

• If you are part of an agency, the agency sees your name, masked email, TikTok username and subscription status.
• If you registered with a referral code, the code owner sees your masked email, TikTok username and registration date.
• Overlays and games show live, to those watching, the public names and pictures of the viewers involved.

5. Transfers outside the European Union

Some providers (including Railway, Netlify, Resend, Discord, Anthropic, Google, GitHub, Euler Stream and Jina AI) are based or have servers outside the European Economic Area, in particular in the United States. Transfers take place on the basis of the EU-US adequacy decision (EU-U.S. Data Privacy Framework), for participating providers, or of the standard contractual clauses approved by the European Commission.

6. How long we keep the data

• Account, configurations, uploaded content, links: as long as the account exists. When you delete it, they are erased immediately.
• Payment and purchase data (including proof of the waiver of withdrawal): 10 years, as required by law for accounting records; after the account is deleted they remain unlinked from the profile.
• Viewers' profile pictures in cache: deleted after 60 days without use.
• Login attempts and technical logs: for the time necessary for the security of the service.
• Support tickets: the transcript remains on the TikForge Discord server; you can request its deletion.
• Business contacts: as long as they serve the purpose, or until you request deletion.

7. Your rights

You have the right to:

• access your data and receive a copy;
• have it corrected if inaccurate;
• have it deleted, within the limits provided by law;
• restrict its processing;
• object to processing based on legitimate interest, including business contacts;
• receive it in a structured format (portability);
• lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority) (garanteprivacy.it) or with the authority of your country.

To exercise them, write to tikforge@outlook.com. You can delete your account yourself from the app (Home → Danger zone): deletion is immediate and also cancels any PayPal subscription.

8. Security

We adopt appropriate technical and organizational measures: encrypted connections (HTTPS), passwords stored as hashes, protection against forged requests, limits on login attempts, data access restricted to staff. However, no system is 100% secure.

9. Minors

TikForge is reserved for people who are at least 18 years old. We do not knowingly collect data from minors: if we learn that an account belongs to a minor, we close it and delete the data.

10. Changes

We may update this Policy; the date at the top of the page shows the latest revision. Material changes are communicated by email or in the app.