Privacy policy
Last updated 11 November 2026
This policy explains what Galdur Analytics (“the service”) does with your information. The service is made by Galdur Software in Reykjavík, Iceland, which is the data controller. Questions go to hello@galdursoftware.com.
What we collect
We only receive data from TikTok after you click Continue with TikTok and approve access on TikTok’s own page. Depending on the permissions you approve, TikTok gives us:
- Basic profile (user.info.basic): your account ID for this app (open_id), display name and profile picture.
- Profile details (user.info.profile): your username, bio, profile link and whether your account is verified.
- Account stats (user.info.stats): your follower, following, like and video counts.
- Videos (video.list): your public videos with title, description, cover image, link, date posted, length, and view, like, comment and share counts.
TikTok also gives us an access token and a refresh token, which let the service read the data above for you. We never ask for or see your TikTok password. We do not collect your email address, phone number, messages or anything outside the list above.
How we use it
Only to show you your own dashboard. We do not use it for advertising, profiling or training AI models, and we never show one person’s data to anyone else.
Where it is kept, and for how long
- Your TikTok data is fetched live from TikTok each time you open your dashboard and sent straight to your browser. We do not save it in a database or in files.
- Your access and refresh tokens are kept in an encrypted, HTTP-only cookie in your browser. The cookie expires after 24 hours, or at once when you disconnect.
- Our hosting provider, Vercel Inc., keeps short-lived server logs (such as IP address, time and page requested) to run and protect the service.
Sharing
We do not sell or rent your data, and we do not share it with advertisers. The only service provider that handles it is Vercel Inc., which hosts the website. Vercel may process data outside the European Economic Area under the EU Standard Contractual Clauses.
Cookies
We use one essential cookie that keeps you logged in. We use no analytics, advertising or tracking cookies.
Disconnecting and deleting your data
Click Disconnect on your dashboard. We revoke the access token at TikTok and delete the cookie, so no TikTok data about you remains with us. You can also remove Galdur Analytics from the apps connected to your account in TikTok’s settings.
Your rights
Under the EU General Data Protection Regulation, which applies in Iceland, you can ask to access, correct or delete your data, to restrict or object to its processing, and to receive a copy of it. Because we do not store your TikTok data, disconnecting meets most of these requests. Email hello@galdursoftware.com for anything else. You can also complain to the Icelandic Data Protection Authority, Persónuvernd (personuvernd.is).
We process your data to provide the service you ask for when you connect your account (GDPR article 6(1)(b)).
Children
The service is not meant for children under 13, and we do not knowingly let them use it.
Changes
If we change this policy, we update the date at the top. If a change is significant, we say so on the site. The terms of service also apply.
Contact
Galdur Software, Reykjavík, Iceland. hello@galdursoftware.com