TikTok connection privacy
Last updated 16 October 2026.
Roblox Editors List (REL) is operated in the UK. Connecting TikTok is optional and confirms control of a TikTok account at the time of authorisation. It does not sign you into REL, give staff permissions or claim a ranked editor profile.
What TikTok shares
With your permission, REL requests user.info.basic and
user.info.profile. REL reads your TikTok account ID,
username and display name. Your TikTok account ID is used privately to
prevent the same TikTok account being connected to different REL
accounts.
REL also requests the optional user.info.stats permission
to read your follower count. You can decline statistics and still connect.
REL does not read your follower list or request posting, messaging or
video-list permissions. TikTok handles its own sign-in and consent
screen. Your TikTok password is never sent to REL.
Temporary access and confirmation
The server exchanges TikTok's authorisation code for temporary access, reads those fields and your follower count if permitted, then revokes access before accepting the proof. TikTok access and refresh tokens are not saved in REL's database, audit log, browser storage or public APIs. If the check or revocation fails, a new connection is not saved.
My account asks you to confirm the returned TikTok username before publishing the connection. Closing or cancelling this step keeps your existing connection. Short-lived HttpOnly cookies and a private ten-minute challenge protect the authorisation flow; the same signed-in REL session must confirm it.
What is public and how long it lasts
The confirmation screen shows any available follower count and explains its publication. After confirmation, ranked editors with an Owner-approved REL account link can appear in the public Popularity list with their follower count and update date. Counts are snapshots from connection or reconnection. Missing statistics are excluded, and counts expire after 29 days. Disconnecting removes the count immediately.
After you confirm, your REL public profile can show your TikTok username, display name, profile link, confirmation date and expiry. The private TikTok account ID, email address, session identity and authorisation secrets are not published.
The dated confirmation expires after 29 days. You need to reconnect to renew it. It is a record of control on that date, not TikTok's blue verification badge or a continuous ownership check. Changes you make to your TikTok username are not monitored; reconnect after changing it.
Expired connections disappear from public results immediately. A scheduled cleanup removes expired private connections and challenges hourly. Disconnect removes your saved connection and pending challenge immediately. Minimal REL actor/action audit entries remain without the removed TikTok ID, username or display name. Existing database backups follow the operator's retention process.
Disconnect or request removal
Use My account → Disconnect TikTok to remove the connection. Temporary TikTok access is revoked during verification, so REL does not retain continuing access to disconnect later. If a provider/network failure left REL listed under TikTok's app permissions, remove it in TikTok's settings under Security & permissions → Apps and services permissions.
For privacy questions or removal requests, email shaun@seeshaun.xyz. TikTok also processes authorisation under its own privacy policy.