PRIVACY / WHAT HAPPENS TO YOUR INFORMATION

A public lookup still
deserves a clear policy.

You do not need to sign in to TikTok to use Tikvoya. Your query still passes through a service, and your support message is still a record. This page explains those distinctions.

Effective November 9, 2026Contact: [email protected]

Profile queries and the data source.

When you submit a username or TikTok link, Tikvoya receives that input. We extract the handle and send it to SerpBase, our third-party profile data provider. If you use a supported share link, our server may first request that link from TikTok to resolve its destination.

SerpBase receives the normalized username and information associated with our server’s request. Its handling of queries is governed by its own privacy policy. We do not send your contact-form email address as part of a profile lookup.

A successful profile record is cached temporarily on our server. It can include the account’s name, username, bio, image URL, links, counts and status indicators.

For each profile lookup, we record the normalized username, query time, response status, cache use, lookup duration, IP address and country code when available, and a random browser identifier. We use these records solely for data analysis, including measuring usage and reliability and counting distinct browsers.

“No TikTok login” does not mean “untraceable.” Network requests, infrastructure and the provider can create technical records. Tikvoya does not offer a guarantee that a lookup leaves no record anywhere.

Browser requests, cookies and logs.

Tikvoya uses a necessary session cookie, tikvoya_session, to associate your browser with a security token. That token protects form submissions. The session expires after approximately 24 minutes without renewed activity. The cookie is HTTP-only and uses HTTPS protection in production.

When you submit a profile lookup, Tikvoya uses the first-party tikvoya_visitor_id cookie to recognize repeated lookups from the same browser. The cookie holds the random identifier for up to one year.

The site does not currently include advertising trackers or third-party analytics scripts. Its JavaScript, styles and icon fonts are served with the site. We do not store query history in your browser’s local storage.

When a returned avatar loads, your browser contacts the image host. That host receives a normal image request, including your network address. Following a profile or website link similarly takes you to an external service under its own rules.

Our web server and hosting infrastructure may keep technical logs such as network address, request path, response status and time. Application error logs may contain error types and provider request identifiers. Application logging is designed to avoid recording API credentials or support-message contents.

Rate controls use server-side counters keyed by hashed connection information; the contact cooldown also incorporates the reply email. These counters help protect the lookup service and contact form from repeated submissions.

What a support message contains.

The contact form stores your optional name, reply email, selected category, message, reference number, handling status and submission timestamps in Tikvoya’s database. We use this information to investigate, respond to and keep track of the request.

A successful form submission means the request was saved. It is not a guarantee of an immediate email reply. If you email us directly, the email service also processes the message.

Please send only what is needed. Do not include passwords, API credentials, payment information, private messages or sensitive details about someone else. A public URL and a concise description are usually enough for a lookup issue.

How long records remain.

We permanently delete profile lookup log records from our database every three months.

Profile results are eligible for reuse for up to five minutes. Expiry stops them being served as a current cache entry; physical removal of expired files happens on access or during housekeeping.

Session and rate-limit expiry also end their active use. Expired technical files may remain until housekeeping removes them. Technical logs are retained for operation, troubleshooting and abuse investigation; this version does not promise a fixed deletion date for every infrastructure log.

Support requests remain available for handling and follow-up. There is currently no automatic deletion schedule for the contact table. If you want a support record reviewed for deletion, contact us with its reference number. We may need to retain information where necessary to address an unresolved dispute, abuse report or applicable obligation.

Access to these records is intended for service operation and support. No online service can promise absolute security, so avoid sending information that the request does not need.

Requests, corrections and your choices.

You can use the site’s explanatory pages without making a profile query. You can also choose not to load a profile or follow its external links.

For a question about a support record or data handled by Tikvoya, email [email protected] or choose Privacy in the contact form. Include the relevant reference or URL and describe the request. We may ask for proportionate verification before disclosing or changing a record.

Tikvoya cannot alter a TikTok account, remove content from TikTok, or guarantee deletion from an independent provider’s systems. We can explain what is under our control and review a request affecting our own records or cached handling.

Changes to this policy.

This policy reflects the current profile-only version. If we add features that change how information is handled, we will update this page and its effective date. Read it again before using a new feature if the handling of your information matters to your decision.

Questions about this policy can be sent to [email protected].

A PUBLIC PROFILE, IN CONTEXT

Ready when you have a handle.

Open the viewer