Legal

Privacy Policy

Last updated: June 2026

Summary

thatmombeth.com is a personal portfolio site. It doesn't ask visitors for accounts or personal information, doesn't run advertising trackers, and doesn't sell or share visitor data. The site collects anonymous, cookie-free page-view and interaction analytics (see below). The TikTok, YouTube, Instagram, and Facebook account data the site works with belongs to a single creator (@thatmombeth) who has authorized this site to act on her behalf.

Data we read from TikTok

The site uses TikTok's official Display API, with one-time OAuth authorization from the @thatmombeth account holder, to fetch metadata for her own public videos. The fields we read are:

• Video ID
• Public TikTok URL of the video
• Posted timestamp
• Video description (caption)
• Cover image (thumbnail) URL
• Embed HTML provided by TikTok
• Video duration in seconds

We do not read direct messages, follower lists, analytics, or any other private data. The OAuth scopes requested are user.info.basic and video.list — the minimum required.

Where that data lives

Video metadata is stored in a Cloudflare D1 database under Beth's control. The site renders pages by reading from that database. We retain video records as long as the corresponding video remains relevant for the site's pitch material; on request, individual records can be deleted.

Sales attribution data

The site also displays affiliate sales totals that Beth exports from her TikTok Shop affiliate dashboard. This data describes her own earnings and the products she has promoted; it does not include personal information about purchasers.

Instagram & Facebook (Meta)

The site can cross-post Beth's own short-form videos to her Instagram and Facebook accounts. This uses Meta's Graph API, with one-time Facebook Login authorization from Beth as the owner of an Instagram Business account and a connected Facebook Page. The access is used to publish her own content — it does not read other people's posts, comments, followers, direct messages, or insights.

What we read from Meta:

• The ID and name of Beth's own Facebook Page
• The ID of the Instagram Business account linked to that Page

What we send to Meta:

• A video (one of Beth's own TikTok posts) and its caption, published as an Instagram Reel and/or a Facebook Reel to her own accounts

The OAuth permissions requested are instagram_basic, instagram_content_publish, pages_show_list, pages_read_engagement, pages_manage_posts, and business_management — the set required to identify her Page and its Instagram account and to publish a Reel on her behalf. Access tokens are stored in the same Cloudflare D1 database as the rest of the site and are used only to publish her content. We do not sell or share them.

YouTube (Google)

The site can publish Beth's own short-form videos to her YouTube channel as Shorts. This uses the YouTube Data API, with one-time Google sign-in authorization from Beth as the owner of the channel. The access is used to publish and manage her own content — it does not read other people's videos, comments, subscriptions, analytics, or any channel other than hers. This app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

What the site does on YouTube (all on Beth's own channel):

• Uploads one of Beth's own videos as a YouTube Short
• Sets the video's title and description (affiliate links + FTC disclosure)
• Sets the "includes paid promotion" disclosure on paid/affiliate videos
• Posts the affiliate link as the video's first comment

The OAuth scope requested is https://www.googleapis.com/auth/youtube.force-ssl — the permission YouTube requires to upload a video, edit its description, set the paid-promotion disclosure, and post a comment on Beth's own channel. Access and refresh tokens are stored in the same Cloudflare D1 database as the rest of the site and are used only to publish and manage her content. We do not sell or share them. Use of YouTube data is also subject to the YouTube Terms of Service and the Google Privacy Policy.

Anonymous site analytics

The site records anonymous page-view and interaction events (such as copying a spark code or clicking a link) to understand how visitors use brand pages. This data is stored in the same Cloudflare D1 database as the rest of the site and is not shared with any third party.

What we collect:

• Page path visited (e.g. "/bloomchic")
• Event type (page view, button click)
• Country and approximate city (from Cloudflare's edge network, not IP geolocation lookups)
• Device type (mobile, tablet, desktop — derived from user-agent)
• Referrer URL and UTM campaign parameters
• An anonymous session identifier (a one-way hash that cannot be reversed to identify you)

What we do not collect:

• IP addresses (used only momentarily to generate the anonymous session hash, then discarded)
• Names, email addresses, or any personally identifiable information
• Cookies — the analytics system is entirely cookie-free

Cookies

The public site does not set tracking cookies. Internal admin pages, accessible only to Beth and authorized collaborators behind Cloudflare Access, use short-lived session cookies for authentication and CSRF protection.

Logs

Cloudflare may retain standard server logs (IP, user agent, request path) for operational and security purposes per Cloudflare's own privacy practices. We do not enrich, sell, or otherwise process those logs.

Disconnecting TikTok

The TikTok account owner can revoke this site's access at any time from TikTok's app-management settings. Revocation stops further data collection immediately; existing stored records can be deleted on request.

Disconnecting Instagram & Facebook

Beth can revoke this site's access to her Instagram and Facebook accounts at any time from her Facebook Business Integrations settings. Revocation immediately stops any further publishing. To request deletion of stored Meta access tokens or account identifiers, email the address below.

Disconnecting YouTube (Google)

Beth can revoke this site's access to her YouTube channel at any time from her Google Account permissions page. Revocation immediately stops any further publishing. To request deletion of stored Google/YouTube tokens or video identifiers, email the address below.

Contact

Privacy questions or data-removal requests: hello@thatmombeth.com.