1. Who processes your data?
Cyber-Space.nl is responsible for processing personal data through Metiri.app at metiri.app. The TikTok connection is registered as SocialStatsCyberSpace. For privacy questions or requests, email daan@cyber-space.nl.
This policy describes the current features of Metiri.app. You do not need to sign in to read this page or the Terms of Service.
2. What data do we process?
- Metiri.app account: username, a hash of your password and the account creation date. We do not store your Metiri.app password as readable text.
- Connected accounts: platform, account or channel ID, display name, available account metadata, access tokens, any refresh tokens and expiration dates.
- Tracked videos: the URL and video ID, platform, title, publication date, available view, like and comment counts, retrieval times and technical error messages. We store comment counts, not comment text.
- Security and technical data: session data and hashed attributes of the IP address and username to limit sign-in attempts. The web server and hosting provider may also process technical request data such as IP address, time, requested URL, browser information and error logs.
- Contact: your email address and the information you provide by email.
Data comes from you, your browser and the official platform APIs. Metiri.app does not download video files and does not ask for your Google, TikTok or Meta password; you sign in directly with the platform.
3. Purposes and legal bases
We process account and session data to provide access to your dashboard and perform the service. The legal basis is performance of our agreement with you.
Connecting a platform is optional. After you grant authorization on the OAuth page, we use the access provided to retrieve the account information and video statistics you selected and display them in your dashboard. We rely on your consent for this optional access. You can withdraw that access; doing so does not make earlier lawful processing unlawful.
We have a legitimate interest in securing the service and preventing misuse. We limit data to what is necessary for that purpose and take your privacy into account. We use contact details to respond to your question. Where necessary, we process data to comply with a legal obligation.
We do not sell personal data and do not use your platform data for advertising, training AI models or decisions that have legal or similarly significant effects.
4. Access by platform
TikTok: through Login Kit and the Display API, we request user.info.basic (basic profile), user.info.stats (profile statistics) and video.list (public videos for the authorized account). We use this access for your account name, follower count, video information and available statistics.
YouTube: Metiri.app uses YouTube API Services with read-only access (youtube.readonly) to your channel and available video data. Google’s Privacy Policy and the YouTube Terms of Service also apply. The use and transfer of data obtained from Google APIs is limited to the purposes of this service and follows the Google API Services User Data Policy, including the Limited Use requirements where applicable.
Instagram and Facebook: where configured, we request the necessary read permissions for Facebook Pages, professional Instagram accounts and related insights. The authorization page shows which permissions are requested.
The platforms also process data for their own purposes under their own policies: the TikTok Privacy Policy and the Meta Privacy Policy. Without authorization for a platform connection, you cannot retrieve the associated statistics.
5. Recipients and external services
Access to stored dashboard data is limited to authorized users and the administrator for necessary administration, support and security. Our hosting and email service providers process data to operate the service and respond to contact requests. We disclose data to authorities only when legally required.
When an API request is made, the relevant platform receives the necessary access token and account or video identifier. Data from different platforms is displayed in the dashboard; we do not send TikTok statistics to Google or Meta, or vice versa.
The sign-in page and dashboard currently load fonts through Google Fonts and software libraries through jsDelivr. These providers therefore receive your IP address and technical request data. The application does not send them OAuth tokens or dashboard statistics for this purpose. These two information pages do not load external scripts.
Platform and CDN services operate internationally, so processing may take place outside the European Economic Area. Their privacy policies describe their processing and safeguards. Appropriate arrangements and, where required, valid transfer safeguards are needed for service providers that process personal data on our behalf. Email daan@cyber-space.nl for the current hosting, email and storage locations and applicable safeguards.
6. How long do we retain data?
Account data is retained for as long as your account is needed for the service. Tokens and metadata for a connection remain available while that connection exists; disconnecting locally removes them from the active database.
Videos and measurements are retained in the current version for as long as you track them: there is no automatic cleanup of the complete measurement history. Delete a video in the dashboard to remove the video record and associated measurements from the active database. Disconnecting alone does not remove this history. You can also request deletion by email.
The application removes outdated sign-in attempts older than 24 hours during a subsequent processed sign-in attempt, once a block has expired. The session cookie has no fixed lifetime and normally expires when the browser session closes; signing out ends the session. After two hours of inactivity, the application session is renewed on the next request.
For server logs, email and any backups, the exact retention period depends on the operational setup. The application does not manage an automatic retention period for these items. We limit retention to what is needed for support, security and legal obligations. Ask us for the current periods. Backups are not used as the active database; after restoration, previously completed deletions must be applied again.
Platform data is also subject to the applicable platform rules. If you request deletion of YouTube data, or if authorization can no longer be verified, we delete that data within 30 days at the latest. This may require manual handling by the administrator.
7. Withdrawing consent and deleting data
- Stop new access: go to Accounts in Metiri.app and disconnect the platform. This removes the locally stored tokens and connection data.
- Withdraw authorization at the platform: for Google, use your Google account permissions. For TikTok, go to Settings and privacy → Security and permissions → Manage apps and services (labels may differ). For Meta, use the settings for apps or business integrations.
- Delete stored history: delete the relevant videos in Metiri.app, or email daan@cyber-space.nl with your username and a request to delete your account, a connection or all associated data.
Withdrawing authorization at a platform does not automatically remove measurement history previously stored in Metiri.app. For complete deletion, also submit a deletion request or delete the videos. Never send passwords or access tokens. We may request limited additional information to prevent someone else from having your data deleted.
9. Your privacy rights
You may request access to, correction or deletion of, restriction of processing of, or a portable copy of your personal data, to the extent these rights apply. You may object to processing based on a legitimate interest. You may withdraw consent at any time.
Email your request to daan@cyber-space.nl. We normally respond within one month. If the law permits an extension due to the complexity or number of requests, we will inform you within that first month. A statutory retention obligation may limit deletion of certain data; if so, we will explain this.
You have the right to lodge a complaint with the Dutch Data Protection Authority or your local privacy regulator.
10. Changes and contact
We update this page when the service or our data processing changes. The date at the top shows the latest update. We notify users of material changes through the dashboard or an available contact method; we will ask for consent again where a new purpose requires it.
Contact: Cyber-Space.nl · daan@cyber-space.nl.