mcs-va.tiktok.com ... mcs-sg.tiktok.com ... mcs-ie.tiktokw.eu ... maliva-mcs.byteoversea.com ... sgali-mcs.byteoversea.com [multiple data collection endpoints across US, Singapore, EU, and ByteDance infrastructure]
Cross-border data transfers to countries outside the EU/EEA — including transfers to ByteDance infrastructure — require specific legal safeguards under GDPR, and TikTok's ownership structure has made these transfers a focus of regulatory and national security scrutiny.
TikTok's platform policy governs what content users can post, how accounts can be suspended, and what data is collected — including extensive device-level signals such as motion sensor data, clipboard access, geolocation API calls, and browser fingerprinting data embedded in the platform's technical infrastructure. Minors are subject to additional content restrictions and account controls, but the adequacy of parental consent mechanisms and cross-border data transfer protections remains a material concern given TikTok's ownership structure. You can limit some data collection by reviewing your privacy settings in the TikTok app under Settings > Privacy and enabling Family Pairing if you are a parent of a minor user.