Privacy Policy

You paste a link to a public TikTok video, a username or a name. The server fetches the matching public TikTok data, hands it to your browser, and everything else happens there. On the free side nothing about you is asked for, and nothing about what you looked up is kept.

The link you paste is sent to this site's own server, which asks a comment-retrieval provider for the public comments on that video. Those comments (the commenter's public username, the text, the timestamp and the profile picture) come back and are passed straight to your browser.

From there everything is local to your tab. Your rules are applied, the seed is computed and the winners are drawn in your browser, using the same code anyone can re-run to check the result. The server never sees your rules, never sees the outcome, and keeps no copy of the comments once the response has been sent.

The comment viewer and comment exporter read a video's public comments exactly the way a draw does. Searching, sorting and building the CSV or JSON file all happen in your browser; the file is never uploaded anywhere.

The profile picture viewer and the follower counter send the username you enter to the server, which asks the provider for that account's public profile: name, username, bio, picture and counts. The follower counter's live mode repeats that request every 30 seconds while you watch. The username finder does the same with the name you search for. The best-time-to-post checker sends the username to the server, which asks the provider for that account's recent public posts and passes back only when each went up and its view count; the comparison by day and hour is made in your browser. In every case the result goes to your browser and the server keeps neither what you typed nor what came back.

The transcript generator sends the video link you paste to the server, which asks the provider for that video's public details and its caption track. When a video of two minutes or less has no captions, the provider transcribes its audio with AI instead. The transcript goes to your browser and is not kept; the copy and the .txt, .srt and .vtt files are made in your browser and never uploaded.

Checkout is run by Stripe, which acts as the seller of record. Stripe collects your card details, billing country and email, charges the card, handles tax and sends the receipt, under Stripe's privacy policy. Card details never reach this site.

When you open checkout, the order sent to Stripe also carries the path of the page you first opened on this visit and the name of the site that sent you, if any (for example, google.com), so sales can be counted by where they came from. Nothing is written to your browser to do this, and nothing is sent until you start a checkout.

This site keeps, in its own database:

Free use sets no cookies at all. Two are set when you need them, both strictly necessary for what you asked for, and neither is used for tracking or advertising:

Account and purchase records are kept while the account exists, and for as long after as tax and accounting rules require of a sale. To have your account deleted, or to get a copy of what is held, write to support@stelvy.com from the address on the account.

The endpoints that cost money to call are rate limited, and the limits are keyed on your IP address. The address is held in memory only, for the length of the window it counts against (sixty seconds, and twenty-four hours for reading comment sections), and is discarded when the window resets. It is not written to disk, not linked to anything else, and not used for any purpose beyond stopping one visitor from exhausting the request budget.

Separately, and like any site on the public internet, the hosting provider records standard server logs.

Commenters' profile pictures are fetched by this site's server and served from this domain rather than loaded directly from TikTok's image servers. A side effect worth naming: your browser never connects to TikTok while you use the tool, so TikTok is not handed your IP address or a page view by the act of running a draw.

Page views are counted with Cloudflare Web Analytics, which is cookieless. It does not fingerprint visitors, does not build a profile across sites, and does not track individuals; it reports aggregate counts such as how many people opened a page. There is no Google Analytics, no advertising tag, and no third-party tracker on this site.

These providers necessarily see traffic in the course of the tools working. None is given anything about you beyond what the request itself contains.

A draw necessarily involves other people's data: the entrants' public usernames and comments. Only information already published on the video is read, it is used for the single purpose of running the draw you asked for, and it is not retained after the response leaves the server.

If you publish a result, such as a screen recording or a follow-up video, you are the one publishing those usernames, and that part is on you rather than on this tool. Announcing only the winner, rather than the full entry list, is usually both kinder and sufficient.

This tool is not directed at children. Free use collects no personal information from anyone; paid plans are for adults able to make a purchase.

If the tool changes in a way that affects this policy, the policy changes with it and the date at the top of this page moves. There is no archive of previous versions; the current text is the whole policy.