FreePoster Privacy Policy
Effective October 30, 2026
FreePoster is a desktop app that publishes short videos you choose to your own TikTok, Instagram, Facebook, X and YouTube accounts through each platform's official API. This policy explains what information FreePoster handles and where it goes. In short: FreePoster runs on your computer and keeps your information there. We, the FreePoster project, do not run servers that receive, store or sell your data.
Information FreePoster handles
- Account sign-in tokens. When you connect an account, the platform gives FreePoster access and refresh tokens. They are stored on your computer, encrypted (AES-256-GCM), and used only to post the videos you choose and to keep the connection alive.
- Basic account details. To show which account you are posting to, FreePoster keeps the account's identifier and name. For TikTok, that is your open ID, username and nickname, read with the
user.info.basicpermission, along with your account's posting options (allowed privacy levels, whether comments, duets and stitches are allowed, and the longest video you may post). - Your videos, captions and titles. FreePoster keeps a copy of each video you post, converts it to the format the platforms accept, and uploads it with your caption and title to the accounts you selected.
- Post history. Which posts went to which accounts, when, their links, and any error a platform returned.
- Your developer app keys, which you enter during setup.
All of this is stored only on your computer, in FreePoster's data folder (on Windows, %APPDATA%\FreePoster).
How it is used
Only to do what you ask: connect your accounts, publish and schedule your posts, show their status, and refresh sign-ins before they expire. FreePoster does not use your information for advertising, profiling or analytics, and it contains no tracking, telemetry or third-party analytics.
Who it is shared with
- The platforms you choose. Your videos, captions and titles are sent directly from your computer to the platforms you select (TikTok, Meta, X, Google/YouTube), under their own privacy policies.
- The sign-in return page. After you sign in, platforms send your browser to this website (freeposter.pages.dev), which immediately passes the sign-in result back to FreePoster on your computer. The page stores nothing. Its host, Cloudflare, may keep standard technical logs (such as IP addresses) as described in Cloudflare's privacy policy.
- AI agents you connect. If you connect an AI agent to FreePoster's built-in MCP server, that agent can see your connected account names and post history and can post on your behalf. It never receives your sign-in tokens or keys.
We do not sell or rent information, and no one else receives it.
Keeping and deleting your information
Your information stays on your computer until you remove it. To disconnect an account, press Remove next to it in FreePoster, which deletes its tokens and post history from your computer. You can also revoke FreePoster's access in the platform's own settings (on TikTok: Settings and privacy → Security → Manage app permissions). To delete everything, uninstall FreePoster and delete its data folder. Videos you published stay on the platforms until you delete them there.
Security
Sign-in tokens are encrypted at rest with a key kept on your computer, FreePoster's local server accepts connections only from your own computer, and every connection to a platform uses HTTPS.
Children
FreePoster is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly handle their information.
Changes
If this policy changes, the updated version will be posted on this page with a new effective date.
Contact
Questions about this policy: open an issue at github.com/kharyf/freeposter/issues.