Privacy policy.
unprompted is a personal automation tool I built for exactly one TikTok account: my own, @the.weights.remember. It is not a product, it is not offered to anyone else, and nobody else has an account on it. This page covers the small amount of data it touches, which is that one account's own access tokens and nothing more.
01What unprompted does
Once a day, a script on my own private server writes a short video script using Anthropic's Claude API, generates a synthetic voice to read it, edits that over public-domain archival footage, and posts the finished video to @the.weights.remember.
That is the whole thing. There is no sign-up, no app to install, no other user, and no second TikTok account connected to it.
02Who is responsible for it
unprompted is run by me, Chopskie, a solo developer based in the United Kingdom. For the purposes of the UK GDPR I am the data controller for the data described below. You can reach me at chopskie@chopskie.com.
03What data it handles
Three things, all belonging to my own TikTok account:
- the OAuth access token TikTok issues so the script is allowed to post
- the refresh token that keeps that access alive without me logging in again
- the account's open_id, which is the identifier TikTok uses for it
These are stored only on my own private server and used for exactly one purpose: posting the daily video to that account. Nothing else is stored and nothing else is requested.
04What it does not collect
It collects nothing about viewers, followers, commenters, or any other TikTok user. It does not read anyone's feed, profile, messages, watch history or interests, and it never asks TikTok for data about anyone other than the connected account.
There is no analytics, there are no cookies, there is no advertising, and there is no tracking of any kind. There is also no user-facing product here to track anyone through.
05The TikTok permissions it uses, and why
user.info.basicis Login Kit's basic profile scope. It is used to confirm the script is connected to the right account and to read the nickname it posts under.
video.publish and video.upload are used to send the finished daily video to that account.
No other scopes are requested, and nothing in the app does anything beyond what those two jobs need.
06Where it is stored, and for how long
The tokens sit on a private virtual server I control, in a file readable only by the system account the script runs as. They are never copied to another service and never backed up anywhere else.
They are kept only while the app is connected. When a token expires or is replaced it is overwritten, and when access is revoked or I retire the app, the stored tokens are deleted.
07Third parties
I do not sell data and I do not share it with anyone.
Anthropic's Claude API is the only outside service involved in making a video. It receives the prompt describing what the next video should be about, plus the list of previous posts so the script does not repeat itself. It never receives the access token, the refresh token, the open_id, or any other TikTok account data.
TikTok receives the finished video, its caption and its post settings, because TikTok is where the video goes.
08Every post is labelled as AI-generated
The script and the voice are both generated by AI, so every video is published with TikTok's AI-generated content label switched on. Nothing is passed off as a human recording.
09Your rights, and how to cut access off
The only account connected is mine, so in practice I am the only person whose data is involved. The lawful basis is consent: I connect my own account through TikTok's OAuth flow, and that consent can be withdrawn at any time. There is no profiling and no automated decision-making about any individual.
Under the UK GDPR you have the right to ask what data I hold about you, to have it corrected or deleted, to restrict or object to what I do with it, and to receive it in a portable form. If you think I hold anything of yours, email chopskie@chopskie.com and I will deal with it.
Access can be revoked at any time from TikTok's own settings, under Security and permissions, then Manage app permissions. Revoking there immediately stops the app being able to post. If you also want the stored tokens deleted, ask me and I will delete them.
If you are unhappy with how I have handled something, you can complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk.
10Changes, and getting in touch
If any of this changes, the updated policy goes on this page and the date at the top changes with it. Last updated: October 31, 2026.
Questions about this policy, or about unprompted itself, can go to chopskie@chopskie.com. The terms of service are at /unprompted/terms.