Open the app

Privacy Policy

Last updated September 5, 2026

This Privacy Policy explains what ScrollBack collects, why, and what control you have over it. It covers the website scroll-back.com, the web app, and the ScrollBack iPhone app.

  1. Who we are

    ScrollBack is published by Félix Thiollier, 38 avenue des Ternes, 75017 Paris, France. For anything in this policy, write to felixthiollier63@gmail.com.

    ScrollBack is an independent product. It is not affiliated with, endorsed by, or sponsored by TikTok or ByteDance Ltd.

  2. The short version

    Your TikTok data export is read inside your own browser or phone and stored on your own device. It is never uploaded to our servers, and we never see its contents. We run no advertising trackers and no analytics.

  3. What we collect

    Account data. The web app signs you in anonymously the first time you open it, which creates an account identifier with no personal data attached. If you later add an email address and password — or sign in with Apple in the iPhone app — we store that email address and the authentication credentials, which are managed for us by Firebase Authentication. We never see or store your password.

    Your TikTok export. When you import the ZIP or JSON file TikTok gives you, it is opened and parsed locally: in your browser tab on the web, on your device in the app. The video links and save dates it contains are written to your device's own storage so the app can show them again next time. The export itself is never transmitted to us and never leaves your device.

    Usage data. Two counters, tied to your account identifier:

    • the number of videos you have opened, so the free allowance can be enforced
    • your subscription status and its renewal date

    Payment data. If you subscribe on the website, Stripe processes the payment and we store only the Stripe customer identifier it returns. Your card number never reaches our servers. If you subscribe in the iPhone app, Apple processes the payment and we receive only the resulting entitlement.

    Technical storage. The site uses your browser's local storage and IndexedDB to keep your imported list, your preferences and a cache of video thumbnail URLs. These are technical to the functioning of the app — there are no advertising or measurement cookies, and no consent banner is required because nothing is stored for those purposes.

  4. How we use it

    • Show you the saved TikToks from your own export, sorted oldest-first
    • Authenticate you and keep one account across the website and the iPhone app
    • Fetch each video's thumbnail image for display
    • Apply the free allowance and unlock unlimited access once you subscribe
    • Answer you when you contact support

    We do not profile you, we do not build advertising audiences, and we do not sell, rent or share your personal information with third parties for marketing purposes.

  5. Services we rely on

    Running ScrollBack requires a small number of processors, each of which sees only what it needs:

    • Firebase (Google) — authentication and the database holding your account identifier, view count and subscription status. firebase.google.com/support/privacy
    • Stripe — payments made on the website, including card processing and the billing portal. stripe.com/privacy
    • RevenueCat and Apple StoreKit — purchases made inside the iPhone app. revenuecat.com/privacy and apple.com/legal/privacy
    • Vercel — hosting of the website and its server routes. vercel.com/legal/privacy-policy
    • TikTok oEmbed — thumbnail images only. The request is made by our server rather than by your browser, so TikTok does not receive your IP address, and no personal data about you is sent.

  6. Where your data lives and how it is protected

    • Account data is stored on Firebase servers in the European Union.
    • Your imported list of saved TikToks stays on your own device.
    • All traffic runs over encrypted HTTPS connections, and access to your account is gated by short-lived authentication tokens.

  7. How long we keep it

    • Account data is kept for as long as your account exists.
    • When you delete your account, the data associated with it on our servers is permanently removed.
    • Data held on your device disappears when you delete the app or clear the site's data in your browser.

  8. Your rights

    Under the General Data Protection Regulation you may access your personal data, correct it, have it deleted, receive a portable copy, object to or restrict its processing, and withdraw any consent you have given.

    Write to felixthiollier63@gmail.com and we will answer within one month. If you are not satisfied with our response, you can lodge a complaint with your national supervisory authority — in France, the CNIL (cnil.fr).

  9. Children

    ScrollBack is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal data, contact us and we will delete it.

  10. Changes

    We may update this policy. The date at the top of this page always reflects the current version, and material changes will be announced in the app. Continuing to use ScrollBack after a change means you accept the updated policy.

  11. Contact

    Félix Thiollier — 38 avenue des Ternes, 75017 Paris, France — felixthiollier63@gmail.com