Privacy Policy
1. Introduction
This Privacy Policy explains how TWICE Esports ("TWICE Esports," "we," "us," or "our") collects, uses, stores, shares, and protects information when you use https://twiceesportsph.com and related TWICE Esports services, including Creator Notify, community features, admin tools, and Discord notification features.
This policy applies to the TWICE Esports website, user accounts, admin tools, community features, Creator Notify, Discord notification features, TikTok authorization features, and related services.
By using the website or authorizing TikTok Creator Notify, you agree to this Privacy Policy.
2. Who Operates This Website
TWICE Esports is operated by TWICE Esports, represented for contact purposes by TWICE Nayeon.
Operator: TWICE Esports
Representative: TWICE Nayeon
Email: nayeoncodmdrive@gmail.com
Website: https://twiceesportsph.com
Jurisdiction: Philippines
3. Information We Collect
3.1 Account and Login Information
When you create, use, or access an account, TWICE Esports collects or processes:
- Username
- Display name
- Email address if required
- Authentication provider ID if used
- Password hash if password login is used
- Role or permission level
- Account status
- Login and session timestamps
- Profile information submitted by the user
TWICE Esports never stores plain-text passwords.
3.2 Community and Form Information
When you use community features or submit forms, TWICE Esports collects information you voluntarily submit, including:
- Clan or community applications
- Member reports
- Messages and shoutbox content
- Usernames, in-game names, and social profile links submitted by users
- Uploaded images or attachments if enabled
- Other information voluntarily submitted through forms
3.3 Admin, Moderation, and Security Logs
TWICE Esports collects admin, moderation, and security records such as:
- Admin actions
- Moderation actions
- Role changes
- Creator Notify changes
- Login attempts
- Security events
- API request metadata
- Error logs
- IP address or approximate technical request data if collected by hosting or security tools
These records are used to prevent abuse, maintain security, audit accountability, and investigate issues.
3.4 Discord Notification Information
When Creator Notify sends or prepares Discord notifications, TWICE Esports processes:
- Configured Discord channel ID
- Discord message ID
- Notification status such as sent, failed, or skipped
- Creator username
- Video caption
- Hashtags
- Thumbnail URL
- TikTok watch link
- Timestamps
Discord data is used only for configured notification delivery and notification records. Ordinary users cannot send arbitrary Discord messages through the system.
3.5 TikTok Creator Notify Information
When a creator uses TikTok Creator Notify and authorizes through TikTok Login Kit, TWICE Esports processes:
- TikTok creator profile URL
- TikTok username
- Normalized TikTok username
- TikTok open_id
- TikTok union_id if provided
- TikTok display name
- TikTok avatar URL
- TikTok profile link
- Granted scopes
- Authorization status
- Token expiration status
- Encrypted access token and refresh token when authorization succeeds
- Public TikTok video IDs
- Public TikTok video URLs
- Public captions
- Public hashtags
- Public thumbnails
- Public publish timestamps
- Notification sent timestamps
- Duplicate-prevention records
We do not collect TikTok passwords. We do not ask creators to enter TikTok credentials on TWICE Esports. TikTok login happens through TikTok's official authorization flow.
3.6 Technical Information and Cookies
When you use the website, TWICE Esports collects or processes technical information such as:
- IP address
- Browser type
- Device type
- Operating system
- Referring page
- Pages visited
- Request time
- Error data
- Cookie or session identifiers
- General usage data
This information is used for login sessions, security, performance, debugging, and abuse prevention.
4. TikTok Data We Collect and Why
TWICE Esports uses TikTok Login Kit so creators can authorize their own TikTok account.
TWICE Esports only uses TikTok data after the creator authorizes through TikTok Login Kit. The app verifies that the authorized TikTok username or profile matches the creator profile assigned to the private authorization link. If the authorized TikTok account does not match the creator profile assigned to the private link, authorization is rejected.
user.info.basic
Used to identify the authorized TikTok user through TikTok-provided account information such as open_id, avatar, and display name.
user.info.profile
Used to read profile information such as username/profile link so TWICE Esports can verify that the authorized TikTok account matches the creator profile assigned to the private authorization link.
video.list
Used to read the authorized creator's public TikTok video list so TWICE Esports can detect new public videos and send Discord notifications.
5. How We Use TikTok Data
TWICE Esports uses TikTok data only for Creator Notify and related operational purposes:
- Verify creator identity
- Match the authorized TikTok account to the creator profile
- Maintain authorized access using server-side tokens
- Refresh expired access tokens when required
- Read public video metadata
- Detect new public video IDs
- Prevent duplicate notifications
- Send Discord notifications
- Troubleshoot support and security issues
- Comply with legal and platform requirements
6. What We Do Not Do With TikTok Data
- We do not collect TikTok passwords
- We do not ask creators to enter TikTok credentials on the TWICE Esports website
- We do not post TikTok videos
- We do not edit TikTok videos
- We do not delete TikTok videos
- We do not access private TikTok content
- We do not sell TikTok data
- We do not use TikTok data for advertising
- We do not use TikTok data for unrelated profiling or unrelated tracking
- We do not share TikTok access tokens with admins, creators, public users, or Discord
- We do not allow unauthorized creator monitoring
7. Discord Notification Use
When a new authorized public TikTok video is detected, TWICE Esports sends a message to the configured Discord channel.
The message may include:
- Creator username or display name
- Caption
- Hashtags
- Thumbnail
- Watch link
- Mention text such as @everyone if configured by admins
Discord notifications are community-facing. Discord is a third-party service. Discord delivery may fail or be delayed due to Discord permissions, API issues, channel settings, or service availability.
8. Legal and Operational Basis for Processing
TWICE Esports processes information based on:
- Creator authorization and consent for TikTok Login Kit and Creator Notify
- Legitimate operation of the website and Discord community
- Security, fraud prevention, and abuse prevention
- Compliance with legal or platform requirements
- User-submitted information for community features
9. How We Share Information
We do not sell personal information or TikTok data.
9.1 TikTok
TikTok handles creator authorization and provides authorized data according to the scopes approved by the creator.
9.2 Discord
TWICE Esports sends selected public TikTok video notification content to a configured Discord channel.
9.3 Hosting, Database, and Infrastructure Providers
TWICE Esports uses Vercel or another hosting provider, Supabase/PostgreSQL or another database provider, and authentication, security, logging, or email providers if used.
These providers process data only as needed to operate, secure, store, deliver, monitor, or support the service.
9.4 Legal and Safety Disclosures
TWICE Esports may disclose information when needed to:
- Comply with law
- Enforce the Terms of Service
- Protect rights, safety, and security
- Investigate abuse, fraud, or unauthorized access
10. Data Retention
- Account data is kept while the account is active or as needed for security or legal reasons.
- TikTok authorization data is kept while Creator Notify is active for that creator.
- TikTok access and refresh tokens are kept until the creator revokes authorization, requests removal, token expiry requires removal, or an admin removes or revokes the creator connection.
- Public TikTok video IDs and metadata may be kept to prevent duplicate Discord notifications and maintain notification history.
- Admin, audit, and security logs are kept as reasonably necessary for security, abuse prevention, accountability, and dispute handling.
- Deleted or removed data may remain in backups for a limited period until backup rotation.
- When data is no longer needed, it is deleted, anonymized, or securely retained only as required.
11. Token and Security Measures
TikTok tokens are processed server-side only. TikTok access tokens and refresh tokens are not displayed to admins, creators, public users, Discord, or browser code.
Server secrets must not be exposed with NEXT_PUBLIC variables. Tokens are not exposed to browser/client code.
- Server-side token storage
- Protected environment variables
- Role-based admin access
- Password hashing
- HTTPS on production
- Rate limiting where used
- Audit logging
- Database access controls
- Encryption or protected storage for TikTok tokens where implemented
- No NEXT_PUBLIC secrets
12. Your Choices and Rights
Users and creators can request:
- Access to relevant personal data
- Correction
- Deletion
- TikTok Creator Notify disconnection
- Withdrawal or revocation of TikTok authorization
- Removal from Creator Notify
- Information about processing
13. How to Disconnect or Request Deletion
To request TikTok Creator Notify removal, TikTok authorization disconnection, or deletion of TikTok-related creator data, email nayeoncodmdrive@gmail.com with your TikTok username and your request. We may need to verify that you are the owner or authorized manager of the TikTok account before completing the request.
Creators may also revoke authorization through TikTok's own account/app authorization settings when available.
14. Children's Privacy
The website is not intended for children below the age required by applicable law or third-party platform rules.
If a child submitted data improperly, contact TWICE Esports for review and removal.
15. International Processing
Data may be processed where TWICE Esports hosting, database, infrastructure, and service providers operate.
By using the website, users understand data may be processed outside their location.
16. Third-Party Links
The website may link to TikTok, Discord, social media links, and external websites.
TWICE Esports is not responsible for third-party policies, privacy practices, content, security, availability, or platform decisions.
17. Changes to This Privacy Policy
TWICE Esports may update this Privacy Policy from time to time. When updates are made, the "Last Updated" date will change.
Continued use of the website after changes means acceptance of the updated Privacy Policy where allowed by law.
18. Transparency / Legal Note
This policy is provided for transparency and is not legal advice. For legal questions, please contact a qualified legal professional.
19. Contact Us
Operator: TWICE Esports
Representative: TWICE Nayeon
Email: nayeoncodmdrive@gmail.com
Website: https://twiceesportsph.com
Jurisdiction: Philippines