Privacy and data control
Data Deletion Instructions
Use these steps to request deletion or ask about retention of data associated with your URLPull activity. Requests must be assessed against applicable security and legal retention limits.
This resource is currently published in English only. Translated legal statements have not been reviewed.
Step 1 — Identify the category of information
Tell us whether the request concerns a generic URL tool submission, temporary delivery output, an account/session record if one was used, or a restricted TikTok Login Kit reviewer session. Do not paste private URLs containing credentials, access codes, passwords, client secrets or full authentication tokens.
Step 2 — Send a minimised deletion request
Address your message to [email protected] with the subject “URLPull data deletion request.” Include an approximate date, the feature used, a safe description of the data concerned and a reply address you control. The operator must verify this mailbox is operational before public legal review; until then, this is a documented intended contact rather than a confirmed support SLA.
Step 3 — Complete an appropriate ownership check
If identification is needed to prevent deletion of another person's data, we may ask for limited contextual proof. We will not ask you to email your URLPull or TikTok password, an OTP, a bearer token or provider client credentials. Some anonymous technical requests may not be attributable to an individual after data has expired.
What can be deleted, and when?
Temporary outputs and state records are subject to their configured expiry and cleanup cycles; deletion cannot be represented as instantaneous for every backup or operational record. Information that must be retained for security, abuse prevention, legal compliance or dispute handling may need to remain for a justified period. A deletion response should describe what could be located, what was removed and any applicable exception.
TikTok reviewer consent and disconnecting access
The restricted TikTok Login Kit review, when separately enabled, requests user.info.basic only. The server uses a one-time OAuth state with a five-minute limit, an actor cookie expiring within fifteen minutes, and a short-lived encrypted identity proof lasting at most ten minutes. The review attempts access-token revocation after reading basic identity; it does not intentionally store TikTok access or refresh tokens in the review database.
A reviewer can choose “Clear this review session” on the restricted review page and can independently remove URLPull's authorization from TikTok's account settings / connected-app permissions. Those two actions affect different systems. If revocation could not be confirmed, review success is not claimed. The TikTok Data Portability integration remains separately unapproved and is not available in Sandbox; no account ZIP/media is generated by this Login Kit review.
There is no automatic account deletion claim
These are contact-based deletion instructions, not a promise that URLPull has implemented an automatic account-erasure endpoint. The appropriate response depends on actual data held and the technical scope. See the Privacy Policy for processing details, Terms for acceptable use and Contact for other inquiries.