1. Scope
dodobrain42 Shorts helps its owner process authorized gaming streams and recordings, create vertical videos, and publish approved results to the owner's connected platform accounts. It is not a general-purpose social network and does not create public user profiles.
2. Data processed locally
The desktop app primarily processes media on the owner's Windows PC. Local data can include source file locations, media metadata, transcripts, clip candidates, edits, captions, queue and schedule state, approvals, publishing checkpoints, duplicate-prevention fingerprints, diagnostics, and app settings. These records support recovery, review, and safe publishing.
Local application secrets and device identity material are protected using Windows security features where supported. Local source video remains under the owner's control unless the owner directs the app to upload a finished video to a connected platform.
3. Account authentication and publishing
When the owner connects YouTube or TikTok, the app uses each platform's authorization process. The platforms may provide account identifiers, channel or creator information, authorized scopes, token expiry information, publishing capabilities, privacy options, upload or post status, and identifiers for videos created through the app.
The app uses this information only to connect the selected account, show relevant account and publishing status, prevent duplicates, upload or schedule owner-approved content, verify results, refresh authorization when permitted, and disconnect access.
4. TikTok broker and Cloudflare
TikTok authentication and publishing coordination use an owner-controlled broker hosted on Cloudflare Workers with Cloudflare D1 storage. The broker performs confidential token exchange and refresh, account-capability checks, publishing initialization, status checks, revocation, request authentication, and replay protection.
The broker may store an opaque owner identifier, enrolled-device public authentication information, encrypted TikTok token records, connection metadata, token-expiry and scope data, one-time nonce/replay records, sanitized security events, and idempotent publishing-intent status. TikTok access and refresh tokens are encrypted at the application level before D1 storage. Secret keys are kept as Worker Secrets.
The broker does not receive, proxy, store, cache, inspect, or back up video media. For file uploads, the Windows app sends video bytes directly to TikTok using the upload location supplied for that publishing action.
5. What is not collected or sold
dodobrain42 Shorts does not sell personal data. It does not use personal data for third-party advertising or unrelated profiling. The public website uses no account system, form, analytics script, advertising tracker, or application database.
The app and broker are designed not to log passwords, authorization codes, PKCE verifiers, access tokens, refresh tokens, client secrets, upload URLs, or raw video media. Platform credentials are not placed in ordinary app settings, normal logs, or the local publishing database.
6. Retention and deletion
Local project, media, transcript, queue, and checkpoint data remains on the owner's PC until the owner removes it or uses the app's applicable cleanup controls. Connected-platform records are kept only as long as reasonably needed to maintain the connection, prevent duplicate actions, recover an authorized job, verify publishing results, protect the service, or meet platform requirements.
The owner can disconnect a platform connection and revoke platform access. Deletion or disconnection requests for broker-held account data can be made using the contact method below. Some minimal security or transaction records may be retained where reasonably necessary to prevent replay, investigate misuse, or document a prior publishing action.
7. Security
Security controls include local operating-system protection, encrypted broker-side token storage, secret isolation, per-device request signing, expiry and nonce checks, least-purpose broker responses, approval gates, and fail-closed behavior when required configuration or verification is unavailable. No security method can guarantee absolute protection.
8. Service providers and platforms
Cloudflare provides hosting and database infrastructure for the TikTok broker and this public site. YouTube and TikTok process information under their own privacy policies when the owner authorizes an account or publishes content. Their handling of information is governed by their respective terms and policies.
9. Changes
This policy may be updated when the app's actual data practices or connected-platform requirements change. A revised effective date will be shown at the top of this page.
10. Contact
For privacy, deletion, disconnection, or security questions, use the contact links published on the official dodobrain42 Twitch channel profile. Do not send passwords, authorization codes, access tokens, refresh tokens, or other secrets.