WhatDoTheyCollect
Back to Home

TikTok Privacy Summary

tiktok.com•Last updated: 03/04/2026
Social Media
High Exposure

Short-form video sharing platform for creating, discovering, and sharing videos with music, effects, and social features across mobile devices.

This summary was generated using AI and may contain errors or omissions. Learn about our methodology. Always refer to the original privacy policy for legal purposes.

Quick Summary

  • What They Collect: Account details, videos/audio/photos, precise GPS location, biometric faceprints and voiceprints, keystroke patterns, device identifiers, browsing history (even non-users), and sensitive data like immigration status, race, health, and religious affiliation.
  • How They Use & Share It: Content recommendation algorithms, targeted advertising, ad measurement with partners, safety moderation; share with advertising networks, analytics providers, business partners, and global corporate group (including China-based employees).
  • Your Rights: Access, delete, and port your data; opt out of personalized ads via device settings; limit ad tracking on iOS/Android; CCPA rights for California users.
Read the full privacy policy

Why You Should Care About TikTok's Privacy Practices

  • TikTok collects precise GPS location, biometric faceprints/voiceprints, keystroke patterns, and browsing history even from non-users — an unusually invasive data footprint.
  • Sensitive personal data including immigration status, race, health info, and religious affiliation can be collected and processed under their policy.
  • Global corporate employees including those in China can remotely access European user data, raising cross-border surveillance concerns.
  • Multiple regulatory fines ($5.7M FTC for children's data, £12.7M ICO) demonstrate a pattern of privacy violations, especially involving minors.
  • In-app browser contains keylogger functionality and the app tracks users who view specific content categories like LGBT-related content.

Why High Exposure?

  • Collects biometric data (faceprints, voiceprints) enabling persistent identification beyond account data.
  • 2026 policy now permits precise GPS location collection, reversing prior commitments not to collect this from US users.
  • In-app browser contains keylogger code capable of recording all keystrokes within TikTok browser.
  • Sensitive personal data categories collected include immigration status, race, health, religion, and financial info.
  • Global corporate group including China-based employees can remotely access European user data.
  • Multiple regulatory fines: $5.7M FTC (children data), 12.7M GBP ICO (children data misuse).
  • Tracks browsing habits and web search history of non-TikTok users.
  • Third-party data acquisition from advertisers and data brokers enables cross-platform profiling.
Learn more about our methodology →

Privacy Highlights

What They Collect

  • Account information (DOB, username, email, phone)
  • User-generated content (videos, photos, audio, text)
  • Biometric data (faceprints and voiceprints)
  • Precise GPS location (new in 2026)
  • Sensitive personal info (immigration status, race, health, religion)

How They Share Data

  • Advertising networks and platforms (targeted ad delivery and measurement)
  • Analytics and measurement partners (usage tracking and reporting)
  • Business partners and marketing partners
  • Global corporate group employees (including China-based staff with EU data access)

Data Retention

TikTok retains data for as long as necessary to provide services. Detailed retention schedules available through the privacy center. Some data retained after deletion for legal obligations and safety.

Your Rights

  • Access data (request a copy of personal data)
  • Delete data (request account and data deletion)
  • Data portability (download your data)
  • Opt out of personalized ads via device settings

Detailed Analysis

Concerning Practices

  • Biometric data collection: faceprints and voiceprints collected for effects, content moderation, and identification
  • In-app browser keylogger: security researchers found keylogger functionality in TikTok in-app browser (Aug 2022)
  • Precise GPS tracking reversal: 2026 policy now permits GPS collection from US users after previously denying it
  • Cross-border data access: China-based employees can remotely access European user data
  • Non-user tracking: collects browsing and search history from people who do not use TikTok
  • Sensitive data collection: immigration status, race, health, religion collected under state privacy law disclosure requirements
  • Content-based profiling: reports of tracking users who viewed LGBT-related content (WSJ, May 2023)
  • Children privacy violations: $5.7M FTC fine (COPPA, 2019) and 12.7M GBP ICO fine (children data, 2023)
  • Algorithmic content recommendation using extensive behavioral and biometric signals
  • Third-party data enrichment from advertisers and data brokers for ad targeting

Personal Data Types

Account information (date of birth, username, password, email, phone number)User-generated content (videos, photos, livestreams, audio recordings, text, comments)Messages and direct communicationsAI interaction data (prompts and questions to AI-powered features)Biometric data (faceprints and voiceprints for effects and identification)Precise GPS location data (if location services enabled; new in 2026)Approximate location (SIM card, IP address)Device and technical information (IP address, OS, browser, device settings, unique identifiers)Keystroke patterns and typing behaviorBrowsing history and web search history (including non-TikTok users)In-app activity (videos watched, search queries, interactions, time spent)Sensitive personal information (citizenship/immigration status, gender identity, religious affiliation, race, physical and mental health, financial information)Payment information (for in-app purchases and creator payments)Contact list data (if contact sync enabled)Information from third-party sources (advertisers, data brokers, social login providers)

Tracking Methods

First-party cookies and similar technologiesThird-party advertising cookies for ad measurement and personalizationDevice identifiers and unique device fingerprintingPrecise GPS location tracking (new in 2026; previously stated not collected from US users)Approximate location via SIM card and IP addressIn-app browser tracking with keylogger functionality (found by security researchers)Cross-site tracking of non-TikTok users via browsing habits and web search historyKeystroke pattern analysisPixel tracking and web beacons for ad partner measurement

Third Parties

Advertising networks and platforms (targeted ad delivery and measurement)Analytics and measurement partners (usage tracking and reporting)Business partners and marketing partners (data sharing for promotions)Service providers (hosting, cloud, payment processing, content delivery)Global corporate group employees (ByteDance subsidiaries, including China-based staff with remote access to EU data)Data brokers and third-party data providers (demographic and behavioral data enrichment)Government authorities and law enforcement (legal requests and compliance)Acquirers or successors (in sale, merger, or reorganization scenarios)

User Controls

Access data (request a copy of your personal data)Delete data (request deletion of your account and data)Data portability (download your data)Opt out of personalized ads via device settings (iOS Limit Ad Tracking, Android Opt Out of Ads Personalization)Limit third-party tracking on iOS 14+CCPA rights for California users (right to know, delete, opt out of sale)Cookie preferences via browser settingsManage privacy settings in-appRestrict who can view your content (public/private account toggle)Control direct messaging permissions

Frequently Asked Questions About TikTok

Want updates when TikTok's privacy policy changes?

We'll notify you when there are significant changes to their data practices.

You'll only receive updates for TikTok. We won't spam you.

Legal Disclaimer

This analysis is provided for informational purposes only and should not be used as legal advice. Privacy Exposure ratings and summaries are AI-generated assessments based on publicly available privacy policies — they are not statements of fact and may contain errors. Learn how ratings are determined. Consult with legal professionals for matters requiring legal guidance.