Browser companion privacy
App accounts are created by the administrator. The service stores your username, display name, salted scrypt password hash, account status, verified Facebook account association, successful login count, last login and last request times, and a general browser/operating-system label. Raw browser headers, hardware identifiers and IP addresses are not stored in application usage records. The administrator can see these account records, reset temporary passwords, revoke sessions and disable accounts. You must change a temporary password on first use. One browser session per App account is allowed; a new login revokes the previous session. Tabs in the same browser share that session. This is not physical-device verification.
Account security events are kept for 90 days; account summary records remain while the account is retained. Recent activity means a valid request in the last 90 seconds, including automatic page refresh, and does not measure working time. App sessions expire after one hour or on service restart. App logout and session replacement leave previously confirmed cloud tasks running; disabling an account pauses its selected Facebook workspace only if no other enabled App account has selected it. Facebook disconnect still pauses tasks and removes Page credentials. Contact the operator for App account record access or deletion; the Facebook data-deletion action below removes companion content but does not remove the separate App account or security audit records.
The administrator can view all customers' connected Page names and IDs, account association, connection status and recorded connection/disconnection times, and counts and confirmation times for videos submitted through this cloud App. This history remains after disconnect or credential expiry, until report deletion by the administrator or Facebook account data deletion. Reports may be filtered and exported to Excel. Report deletion leaves the customer's publishing tasks, credentials and Facebook posts intact; only a one-way key digest and deletion cutoff remain to prevent old task records from repopulating the report. Explicit reconnection starts a new report using tasks created after that cutoff. The cutoff marker remains until operator-managed data removal. Publication confirmation times are App observations, not Facebook's original publication timestamps or evidence of public visibility. Missing historical timestamps are not inferred. Report deletion and export diagnostics contain internal account/record IDs, not credentials or content. Downloaded exports are private copies controlled by the administrator; deleting a report cannot remove previously downloaded files or unexpired backups.
Cloud Studio workspace inventory groups Pages by authorizing Facebook identity. Ordinary users see only their selected workspace; the administrator can inspect all workspaces and explicitly remove a selected duplicate Page grant. No duplicate is removed automatically. Retaining duplicate connections leaves workspace publication limits and deduplication separate. Follower snapshots are read periodically; 24-hour net growth is shown only when fresh observations and an adequate baseline exist. Video totals include only App-confirmed publications, including manual and mirrored videos.
App accounts that authorize the same Facebook identity share its Pages, settings, files and tasks. Reauthorizing a different Facebook identity switches the current workspace without merging data or stopping previous tasks. The separate Add Facebook connection action requires consent to share the selected Pages with every App account using the current workspace. It keeps that workspace selected and stores each authorizing Facebook identity and its encrypted Page grants separately; it does not import another workspace or grant its members access. Refresh affects only the selected identity. Removing a connection deletes its grants in this workspace, pauses tasks and preserves other connections and history. A Page authorized by another valid connection remains available. Full Facebook disconnect or data deletion removes all connections in this workspace and affects every App account using it. Connection identity and name remain until connection removal or workspace data deletion; expired credentials are removed by cleanup.
This companion is operated by MMO Creator Studio. It processes your Facebook user ID and name, authorized Page names, IDs and credentials, and the photos, videos and captions you choose to upload. These support account isolation, Page selection, publishing and result checking.
Page credentials are encrypted in this service’s private storage. Cloud Studio retains them until you disconnect or delete account data; Meta may invalidate access at any time. Browser sessions expire after one hour. User access tokens are used during login and are not saved. The service sends your confirmed photo or video and caption to Meta. The Published content view retrieves up to 25 posts from your selected authorized Page, including post text, IDs, dates and available Facebook links. These results are displayed in your browser and are not saved to the companion database. They are cleared when you change or disconnect the selected Page, or leave the page.
The administrator audit list retains events for 90 days. Operational log files also contain event IDs, internal account IDs and event types for diagnostics. These logs rotate by size (up to four 1 MB files), rather than by age, and may retain entries beyond 90 days during low activity. Passwords, session tokens and Facebook credentials are not included in these diagnostic events. Provider access logs follow their respective policies.
Cloud Studio removes original video files after Meta confirms successful processing and publication. Files with pending, failed or uncertain results remain for review, including files shared with an unfinished job. Creator rules, source identifiers, captions, publication history and duplicate-protection records remain until account data deletion. Removing a row from the working list retains that history. Incomplete uploads expire after 24 hours. Page credentials have no App-imposed 24-hour expiry; disconnect them when no longer needed. Reconnect if Meta invalidates authorization. Daily storage capacity is finite and imports stop before consuming the server's reserved free space.
Only creators you enable and the runtime controls you confirm authorize automatic collection or publication. A fresh server-side Douyin session is kept encrypted in the private collector database and is not sent to Meta or media download hosts. Windows cookies and business records are not migrated. Creator files and state are isolated by the connected Facebook account. Restarting the service pauses collection and publication until you review and start them again.
Disconnect removes this account’s stored companion credentials and sessions while retaining its drafts/history. “Delete my companion data” removes account records and uploaded copies. It does not delete your original files, Windows app data or Facebook posts. Explicit Windows pairing copies selected Page credentials into Windows Credential Manager; disconnect them separately in Windows.
This service runs on an Alibaba Cloud server in Singapore. Cloudflare provides the public HTTPS connection and relays requests, including login callbacks and uploaded content, through an encrypted Cloudflare Tunnel. The operator manages the application and its private storage. See the Alibaba Cloud privacy policy and Cloudflare privacy policy. This service can run while the operator's Windows computer is offline.
Daily database backups are kept privately on the same server for up to seven days. They cover records, not uploaded media or the separately stored encryption key, and do not protect against loss of the server disk. A deletion may remain in those backups until they expire; any recovery must reapply subsequent deletion requests. The operator also retains the previous Windows deployment for migration recovery. Contact [email protected] for access or deletion assistance, including retained migration copies. Deletion here does not erase records independently held by Meta, Alibaba Cloud or Cloudflare.
This notice supplements the MMO Creator Studio privacy policy.