Privacy policy
Last updated: 18 September 2026 · applies to every app and integration listed on apps.elsiri.de (the "Apps"), operated by Omar Elsiri (the "Operator", see Impressum).
1. In short
- The Apps exist to publish my own content to platforms you connect. They are used by the Operator and by people the Operator explicitly invites.
- They access a connected account only through the platform's official API, only with the permissions you approve on the platform's consent screen, and only to upload or schedule posts, read the status of those posts, and show which account is connected.
- They store the minimum needed to do that: the access token the platform issues, the account/channel name and id, and the posts they created for you.
- Nothing is sold, rented, shared with advertisers, or used to train AI models. There is no advertising and no analytics tracking on this site or in the Apps.
2. Data the Apps process
| Data | Why | Kept |
|---|---|---|
| OAuth access & refresh tokens | To act on the connected account on your behalf (upload, schedule, read post status). | Until you disconnect the account or revoke access; deleted within 30 days after that. |
| Account / channel id, name, avatar | To show which account is connected and to address the right one. | Same as above. |
| Posts created through the Apps | Video file, title, description, thumbnail, scheduled time, resulting post id. | Video files: deleted after successful upload or after 30 days. Post records: up to 12 months for history. |
| Approval messages | A preview of a post sent to the Operator's own messenger (e.g. Telegram) for approval. | In the messenger only; not stored by the Apps beyond the post record. |
| Server logs | Request logs of the hosting server for security and debugging. | Rotated automatically; at most 30 days. |
The Apps do not read your private messages, contacts, watch history, friend lists, or any content other than the posts they created, and do not access data of other users of the platform.
3. Platform-specific notes
Google / YouTube
The Apps use YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service; Google's handling of your data is described in the Google Privacy Policy. The Apps request the permission to upload and manage videos on the channel you choose. You can revoke this at any time in your Google account under Third-party apps & services.
The Apps' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data obtained through Google APIs is used only to provide the publishing feature you asked for, is never used for advertising, and is never transferred to others except as necessary to provide that feature, to comply with law, or as part of a merger or acquisition with prior notice.
TikTok
With the permissions you grant, the Apps can post videos to your TikTok account (Content Posting API) and read basic profile information (display name, avatar) to show the connected account. Revoke access in TikTok under Settings → Security → Manage app permissions.
Instagram / Facebook (Meta)
The Apps use the Instagram Graph API / Facebook Login to publish Reels and posts to a professional Instagram account or Facebook Page you connect, and to read basic information about that account. Revoke access in your Facebook settings under Apps and websites. Data deletion: see Data deletion instructions.
4. Where the data lives
On a server rented by the Operator in the European Union (Hetzner Online GmbH, Germany). Tokens are stored encrypted at rest. The data is not transferred to third countries except to the platform you connected, which is inherent in using its API.
5. Legal basis (GDPR)
Art. 6 (1) (b) GDPR – performing the service you asked for by connecting an account – and Art. 6 (1) (f) GDPR – the Operator's legitimate interest in keeping the server secure (logs).
6. Your rights
You can ask for access to, correction of, or deletion of your data, or object to its processing, at any time by e-mail to omar@elsiri.de. You also have the right to lodge a complaint with a data-protection authority, for example the Sächsische Datenschutz- und Transparenzbeauftragte. Disconnecting an account in the App, or revoking the App on the platform, ends all further access immediately; stored tokens are deleted within 30 days.
7. Cookies
This website sets no cookies. The Apps' own web interface sets one session cookie that is needed to keep you logged in; it is not used for tracking.
8. Children
The Apps are not directed at children under 16 and knowingly collect no data from them.
9. Changes
Changes to this policy are published on this page with a new date at the top.