1. Who this policy covers
This policy explains how 4k-tiktok, the operator of Fulres, handles personal information when you visit the website, process a video, or connect your TikTok account. It covers Fulres’s handling of information; third-party services, including TikTok, have their own privacy policies.
2. Video processing and transfers
Fulres sends the selected video to our server for metadata preparation and verification. Processing uses temporary server files; the verified result is returned to your browser. If you confirm an upload or direct post, the optimized MP4 is transferred in bounded chunks through our application server to TikTok. Official API delivery relays bounded chunks in server memory. The experimental web destination uses temporary server disk as described below. Video bytes are not stored in our database or a storage bucket. We do not use your videos to train AI models.
The selected file, preview, result, and local export list are held for the current browser session. Closing the tab releases the app’s access to them. Fulres does not offer video export downloads. Your browser or operating system may manage its own media caches.
Public video checks
When you check a TikTok link, our server requests public post, moderation and playback metadata from TikTok, including an anonymous mobile-web page request for the exact post’s indexing flag. The raw indexEnabled value, source URL and retrieval time are shown separately. It can signal a possible restriction but does not establish official For You eligibility or access your private analytics. Numeric moderation codes remain raw observations. It may read up to two bounded 1 MB media ranges per stream (at most four streams across desktop and mobile checks) to inspect frame timing, codec and color metadata. The checker does not write video files or check results to disk, database or export history. Reports with a successful mobile measurement and a matched recommendation flag may be reused in server memory for up to 45 seconds to reduce repeated requests; their original measurement and provider retrieval times remain visible. Unknown recommendation results are retried rather than cached. Results otherwise stay in the current page. The Mobile web row uses separate Android Chrome mobile-web requests and does not access a physical phone or your TikTok app. Cover images and creator avatars load directly from TikTok’s CDN, which receives your browser’s network request. TikTok may withhold some information or restrict access by region.
If TikTok does not expose a matching boolean indexing flag, the checker sends a canonical public post link containing the resolved video ID to the configured recommendation provider: TikWM by default, or TikTokAPI.io when the operator explicitly enables it with a server-only API key. The optional key-based provider runs only on the server and receives no browser credentials or media. For TikWM only, if our server cannot verify a provider flag, your browser makes one additional direct request to TikWM. TikTokAPI.io failures do not trigger a browser request or silent lookup with another provider. TikWM then receives your browser IP address, website origin and ordinary request headers; credentials and referrer are omitted. Both attempt results and retrieval times remain visible, and browser-obtained flags stay in the current page rather than our server cache. Neither provider receives link tracking parameters, TikTok account credentials, cookies or video files. An operator-configured TikTokAPI.io API key is sent only from the server to that provider in an authentication header. The configured provider receives our server’s network request and handles it under its own practices; Fulres does not establish either provider’s retention or internal cache age. The reported flag is not an official TikTok eligibility decision, and its retrieval time is not the time TikTok evaluated the post.
3. Information stored when you sign in
TikTok sign-in is optional. When you authorize the user.info.basic permission, Fulres requests your application-specific TikTok user identifier, display name, and avatar URL. We store those values, an internal profile ID, and the account creation time to identify your account and show your profile.
For exports completed while signed in, we store the output filename, width, height, frame rate, source duration, source and output file sizes, codec, creation time, and the internal account and export identifiers. Filenames can contain personal information, so choose them with that in mind.
We do not request your TikTok password, email address, contacts, follower statistics, or private messages. Sign-in alone does not request posting access. When you enable inbox uploads, we request the video.upload permission; direct posting requests video.publish. We store the granted scopes, environment, token expiry times, and encrypted access and refresh tokens on the server. These credentials allow the upload or publishing actions you confirm and may be refreshed without another sign-in while the grant remains valid. The tokens are never returned to the browser.
Experimental web publishing connection
The Web uploader destination uses a separate TikTok QR approval to create an isolated browser session on our server. The actual account handle is shown before confirmation and can differ from your app sign-in. We receive its account identifier, handle and display name. Browser cookies and local storage are encrypted on private server disk and scoped to your Fulres account. They are not returned to browser JavaScript or included in data exports. The connection is usable for up to seven days or until TikTok expires it; expired files are removed on next access. Disconnecting the web account, signing out or deleting your Fulres account removes the saved connection.
Web publishing temporarily writes the prepared MP4 to server disk and sends it, your caption and chosen visibility through TikTok Studio. Temporary copies are deleted after handled completion/failure; abrupt host termination may require system cleanup. TikTok controls its own retention, moderation and account checks. Fulres does not change profile privacy. After an unconfirmed post, check Studio before retrying. Account-data downloads include the connected identity and expiration without browser credentials.
Demo accounts
When demo login is enabled, the username “demo” creates a separate account with a randomly generated demo identifier and the display name “demo.” It does not connect to TikTok or retrieve a TikTok profile. Export details are stored in the same way as for other signed-in accounts. The signed session cookie identifies that demo account for up to seven days.
Each login starts a separate demo account, so knowing the public username does not give access to somebody else’s stored history. Signing out does not delete stored demo records, and a new login cannot recover them. Use the account controls below to download or delete your demo data before signing out.
4. Why information is used
We use account information to complete the sign-in you request, identify your profile, keep export details associated with the correct account, provide your history and account controls, send the videos you confirm to TikTok, track their processing status, and protect access to the Service. We use video information locally to check compatibility and perform the metadata edit you request. We store upload identifiers, destination (inbox or direct post), file size, byte progress, creation time, processing status, and error codes. Signed upload URLs are encrypted while a transfer is active and cleared when the transfer finishes or reaches a final state. Captions and publishing choices are passed to TikTok rather than saved in the application database.
Our handling is limited to providing the Service you request and protecting its security and operation. Where applicable law requires a legal basis, providing account features is necessary to perform the service agreement; operational security relies on legitimate interests, subject to your rights; and optional TikTok authorization is initiated by you. Where separate consent is required, we will obtain it.
7. Retention and security
Stored profiles, export records, connection records, and upload progress do not automatically expire in the current version. TikTok enforces token and upload-link expirations. You can remove saved posting credentials using Disconnect posting access in the video export controls; you can also revoke the grant in TikTok. Disconnecting stops new transfers from this app, but cannot recall video data already received by TikTok. They remain until you delete your Fulres account. The account controls below delete your profile, export history, saved credentials, and upload progress records from the active database. Any provider-managed backups or operational logs follow the provider’s retention and deletion lifecycle.
The application uses signed HttpOnly session cookies, server-side database credentials, and access checks that associate records with the signed-in account. Production connections are intended to use HTTPS. No storage or transmission method can guarantee complete security.
Signing out clears the current browser’s session cookie; it does not delete stored records. Revoking access in TikTok prevents future authorization through that connection but does not by itself delete your existing Fulres profile or export history.
8. Your choices and account data
You can use local optimization without signing in. You can sign out, close the tab to release local files, revoke TikTok authorization in TikTok, disconnect saved posting access, download your stored Fulres account information, or delete your Fulres account using the controls below.
The download contains your profile, export details, connection scopes and expiration times, and upload progress records. It excludes video files, access and refresh tokens, and signed upload URLs. Account deletion is permanent in the active database and removes the profile, export history, saved credentials, and upload records. It does not delete your TikTok account, posted videos, local files, or another service’s records.
Your display name and avatar are refreshed from TikTok when you sign in. Depending on the law that applies to you, you may also have rights to access, correction, erasure, restriction, portability, objection, or to complain to a relevant privacy regulator. Nothing in this policy limits those statutory rights.
Your account controls
Checking your session…
9. Children and eligibility
Fulres is intended for people who are eligible to use the Service and, when connecting an account, eligible to use TikTok. It is not designed for collecting information from children who are below the applicable minimum age or lack any legally required parental permission. If you are not eligible, do not connect a TikTok account or provide personal information.
10. Changes to this policy
We will update this page and its date when the Service’s information practices change. Where the law requires additional notice or consent for a material change, we will provide it before that change takes effect. For the terms governing use of the Service, see our Terms of Service.