Privacy Policy

Last updated: 23 September 2026

1. Who we are

MNL (the website at mnl.inkraf.com) is operated by Inkraf ("MNL", "we", "us"). MNL lets creators upload video files from their browser to their own TikTok account as drafts using TikTok's official Content Posting API. You can reach us at support@inkraf.com.

2. Information we collect

Information from TikTok. When you choose "Continue with TikTok" and approve access, TikTok shares the following with MNL:

• Your TikTok open_id (an identifier unique to your account within MNL), display name and avatar image URL. These come from the user.info.basic permission.
• An access token and a refresh token that let MNL act on your behalf within the permissions you approved, plus the list of permissions granted.

Videos you choose to upload. When you press "Send to TikTok", the video file is sent from your browser through our server to TikTok in pieces (chunks) using the video.upload permission. Each piece is forwarded to TikTok immediately and is not written to disk or kept after the transfer.

Technical information. Our hosting provider, Cloudflare, processes standard technical data such as IP address, browser type and request time to deliver and protect the website. Pages also load fonts from Google Fonts, so your browser connects to Google's servers. We don't use analytics, advertising cookies or tracking pixels.

MNL does not access your TikTok messages, followers, following list, likes, comments, or existing videos.

3. How we use information

• To show your display name and avatar in the uploader so you know which TikTok account will receive the draft.
• To upload the video you selected to your TikTok inbox as a draft and to check its processing status.
• To keep you signed in between visits and to protect the sign-in flow against misuse.

We don't use your information for advertising, profiling, or any purpose other than those listed above.

4. Where your information is kept

MNL has no user database. Your TikTok tokens, open_id and granted permissions are stored only in an encrypted, HttpOnly cookie named mnl_session in your own browser. The cookie is encrypted with AES-GCM and can't be read by scripts on the page. It expires after at most 30 days, or when you sign out. During sign-in, a short-lived cookie named mnl_oauth_state (10 minutes) protects against cross-site request forgery.

Your display name and avatar are fetched from TikTok when you open the uploader and are not stored by us.

5. Sharing

• TikTok receives the videos you choose to upload and the requests needed to create the draft, under TikTok's Privacy Policy.
• Cloudflare hosts MNL and processes traffic on our behalf.

We don't sell, rent or trade your personal information. We may disclose information if required by law.

6. Retention and deletion

Because we don't store your videos or profile, there is nothing for us to delete on our side after an upload. To remove MNL's access at any time:

• Click Sign out in the uploader. This deletes the session cookie and revokes MNL's access token at TikTok.
• Remove MNL from the connected apps in your TikTok account's privacy settings.
• Clear your browser's cookies for mnl.inkraf.com.

Drafts already delivered to your TikTok inbox are managed in TikTok, where you can post or delete them.

7. Your rights

Depending on where you live, including under Indonesia's Personal Data Protection Law (Law No. 27 of 2022) and the EU/UK GDPR, you may have rights to access, correct, delete or restrict the processing of your personal data, and to withdraw consent. Because MNL keeps no copy of your data, most requests are fulfilled by signing out. For any question or request, email support@inkraf.com.

8. Security

All traffic to MNL uses HTTPS. Session data is encrypted and stored only in HttpOnly, Secure cookies. Uploads can only be forwarded to TikTok's own upload servers.

9. Children

MNL is not directed at children under 13, or under the minimum age required to use TikTok in your country. We don't knowingly process information about children.

10. Changes to this policy

If we change this policy, we'll update the date at the top of this page. Significant changes will be highlighted on the website.

11. Contact

Questions about this policy or your data: support@inkraf.com.