TikTok: Difference between revisions

Line 16:

==Consumer impact summary==

===User freedom===

*The app version requires an account to use the service.

===User privacy===

As per Privacy Policy:<ref>{{Cite web |title=Privacy Policy |url=https://www.tiktok.com/legal/page/row/privacy-policy/en |access-date=Aug 14, 2025 |website=TikTok}}</ref>

*Automatically collects unreasonable heaps of information to fingerprint the user:

'''Technical Information we collect about you.''' We collect certain information about the device you use to access the Platform, such as your IP address, user agent, mobile carrier, time zone settings, identifiers for advertising purposes, model of your device, the device system, network type, your screen resolution and operating system, app and file names and types, keystroke patterns or rhythms, battery state, audio settings and connected audio devices. [...]

:'''Technical Information we collect about you.''' We collect certain information about the device you use to access the Platform, such as your IP address, user agent, mobile carrier, time zone settings, identifiers for advertising purposes, model of your device, the device system, network type, your screen resolution and operating system, app and file names and types, keystroke patterns or rhythms, battery state, audio settings and connected audio devices. [...]

</blockquote>

:*"Keystroke patterns or rhythms" is particularly notable as the in-app browser has been demonstrated to listen to inputs from keyboard and screen, as well as injecting JS code.<ref>{{Cite web |last=Krause |first=Felix |date=Aug 18, 2022 |title=iOS Privacy: Announcing InAppBrowser.com - see what JavaScript commands get injected through an in-app browser |url=https://krausefx.com/blog/announcing-inappbrowsercom-see-what-javascript-commands-get-executed-in-an-in-app-browser#tiktok |access-date=Aug 14, 2025 |quote=While you are interacting with the website, TikTok subscribes to all keyboard inputs (including passwords, credit card information, etc.) and every tap on the screen, like which buttons and links you click.}}</ref>

*Also collects approximate location based on "SIM card and/or IP address" and precise location such as GPS.

*Serves personalized advertisements and runs its own AI-powered analytics tool for advertisers called "Insight Spotlight".<ref>{{Cite news |last=Sato |first=Mia |date=Jun 3, 2025 |title=TikTok will give advertisers even more data on trends and users |url=https://www.theverge.com/news/678255/tiktok-advertiser-summit-ai-targeting-data-seo |access-date=Jun 25, 2025 |work=The Verge}}</ref>

@@ Line 16: / Line 16: @@
 ==Consumer impact summary==
 {{Ph-C-CIS}}
+===User freedom===
+*The app version requires an account to use the service.
 ===User privacy===
 As per Privacy Policy:<ref>{{Cite web |title=Privacy Policy |url=https://www.tiktok.com/legal/page/row/privacy-policy/en |access-date=Aug 14, 2025 |website=TikTok}}</ref>
 *Automatically collects unreasonable heaps of information to fingerprint the user:
 <blockquote>
-'''Technical Information we collect about you.''' We collect certain information about the device you use to access the Platform, such as your IP address, user agent, mobile carrier, time zone settings, identifiers for advertising purposes, model of your device, the device system, network type, your screen resolution and operating system, app and file names and types, keystroke patterns or rhythms, battery state, audio settings and connected audio devices. [...]
+:'''Technical Information we collect about you.''' We collect certain information about the device you use to access the Platform, such as your IP address, user agent, mobile carrier, time zone settings, identifiers for advertising purposes, model of your device, the device system, network type, your screen resolution and operating system, app and file names and types, keystroke patterns or rhythms, battery state, audio settings and connected audio devices. [...]
 </blockquote>
+:*"Keystroke patterns or rhythms" is particularly notable as the in-app browser has been demonstrated to listen to inputs from keyboard and screen, as well as injecting JS code.<ref>{{Cite web |last=Krause |first=Felix |date=Aug 18, 2022 |title=iOS Privacy: Announcing InAppBrowser.com - see what JavaScript commands get injected through an in-app browser |url=https://krausefx.com/blog/announcing-inappbrowsercom-see-what-javascript-commands-get-executed-in-an-in-app-browser#tiktok |access-date=Aug 14, 2025 |quote=While you are interacting with the website, TikTok subscribes to all keyboard inputs (including passwords, credit card information, etc.) and every tap on the screen, like which buttons and links you click.}}</ref>
 *Also collects approximate location based on "SIM card and/or IP address" and precise location such as GPS.
 *Serves personalized advertisements and runs its own AI-powered analytics tool for advertisers called "Insight Spotlight".<ref>{{Cite news |last=Sato |first=Mia |date=Jun 3, 2025 |title=TikTok will give advertisers even more data on trends and users |url=https://www.theverge.com/news/678255/tiktok-advertiser-summit-ai-targeting-data-seo |access-date=Jun 25, 2025 |work=The Verge}}</ref>