← back to the gallery

Privacy

This is a small, invitation-only archive. It is not a business, it sells nothing, and it has no advertising. This page says exactly what it keeps and why.

Last updated: 28 September 2026

If you have an account here

An account exists so the gallery can remember what you have already watched. It holds:

• your email address, which is how you sign in and the only way to reach you;
• a display name, if you gave one;
• your password — stored only as a scrypt hash with a per-account salt. The password itself is never written down and cannot be read back, not even by whoever runs this site;
• the dates the account was created and last used;
• which videos you marked as seen and which you starred;
• sounds you suggested and profiles you chose to follow;
• whether you are marked as a supporter, and a short note about it, if that applies.

While you are signed in there is one cookie, harvester_sessao. The database keeps only the SHA-256 of its value, never the value itself, so reading the database does not hand anyone a working session. It is strictly a sign-in cookie: there is no advertising cookie and no tracking cookie here.

What this site does not do

• No analytics of any kind. No page-view counting, no heatmaps, no session recording.
• Nothing is loaded from anyone else's servers. No web fonts, no script CDNs, no embedded players, no social buttons. Every page is served whole from this machine, so no third party learns that you visited.
• Nothing is sold, shared or handed on to anybody, for any purpose.
• No profiling and no automated decisions are made about you.

Server logs

The web server in front of the gallery keeps ordinary access logs — IP address, time, the address requested, and the browser's user-agent string. They exist to keep the site running and to notice abuse. They roll over as they fill, so old entries are overwritten rather than kept forever.

Failed sign-in attempts are counted per IP address for fifteen minutes to slow down anyone guessing passwords. That count lives in memory only and is never written to the database.

Email

The only messages this site sends are the link that confirms your address when you register, and the same when you change your address. There is no newsletter and there are no notifications. If the site has been set up with an outside mail service, that service handles delivery and will see the address the message is sent to.

How long things are kept

Account data stays while the account exists. Closing your account from the settings page suspends it: you are signed out and cannot sign back in, and what you marked stays in the database. If you want it erased rather than suspended, ask — see below.

Confirmation links expire after two days and are deleted once used.

The videos themselves

This archive keeps copies of videos that were public on TikTok, together with the information TikTok published about them: the caption, the creator's public @name, the counts, the date, and a link back to the original. Some of that is personal data about the people who made the videos, and about people who appear in them.

If you are one of those people, you can ask for a video to be taken out, and it will be — see Content removal. That page explains what happens, and why removal here actually sticks.

Your rights

You can ask to see what is held about you, to have it corrected, to have it erased, or to object to it being held at all. Some of it you can do yourself, right now, from account settings in the gallery: change your email address, change your password, or close the account.

For anything else, write to no contact address has been set for this site — see EMAIL_CONTACTO in implantar/galeria.env. You are also entitled to complain to the data protection authority in the country where you live.