10 Total
6 High severity
4 Medium severity
0 Low severity
Summary

This is TikTok's privacy policy for US users, explaining what personal information TikTok collects about you, how they use it, and who they share it with. TikTok collects a large amount of data including your videos, messages, location, device details, biometric information like your face and voice, and even what you copy to your clipboard. You have rights to access, delete, and correct your data, and you can opt out of certain types of targeted advertising through your account settings.

Technical Summary

TikTok's US Privacy Policy (last updated February 5, 2026) governs the collection, use, sharing, and retention of personal information across TikTok apps, websites, software, and the TikTok Ad Network, operated by TikTok USDS Joint Venture LLC. The document discloses collection of an extensive range of data categories including biometric identifiers (faceprints and voiceprints), precise location, device technical data, purchase history, AI interactions, clipboard content, and inferred attributes such as age, gender, and interests. Key provisions address third-party data sharing with advertisers, payment processors, sellers, and business partners; user rights under CCPA and analogous state privacy laws (access, deletion, correction, portability, and opt-out of targeted advertising); special protections for minors; and a separate Consumer Health Data Privacy Policy for states including Washington. The policy explicitly states TikTok does not sell personal information or share it for cross-context behavioral advertising where restricted by law, though extensive sharing with advertising and analytics partners is disclosed.

Institutional Analysis

This policy engages CCPA (California Consumer Privacy Act) and analogous state privacy statutes, disclosing sensitive data processing categories including biometric identifiers regulated under BIPA-s…

This policy engages CCPA (California Consumer Privacy Act) and analogous state privacy statutes, disclosing sensitive data processing categories including biometric identifiers regulated under BIPA-style state laws. The reference to Executive Order 14352 compliance obligations and the TikTok USDS J…

🔒

Compliance intelligence locked

Regulatory exposure, material risk, and due diligence action items.

Evidence Provenance
Captured March 6, 2026 18:27 UTC
Document ID CA-D-000033
Version ID CA-V-000028
Wayback Machine View archived versions →
SHA-256 b7e48b417c179a5bffb5db14863e3df7d367ec416318d3f9e172c9aa7f1053bc
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Cryptographically signed
Change Timeline
High Severity — 6 provisions
Medium Severity — 4 provisions