Legal
Privacy Policy
Last updated: September 2026
Summary
thatmombeth.com is a personal portfolio site. It doesn't ask visitors for accounts or personal information, doesn't run advertising trackers, and doesn't sell or share visitor data. The site collects anonymous, cookie-free page-view and interaction analytics (see below). The TikTok, YouTube, Instagram, Facebook, and Pinterest account data the site works with belongs to a single creator (@thatmombeth) who has authorized this site to act on her behalf.
The site can manage Beth's own organic Pinterest content through Pinterest's official API, with OAuth authorization from Beth as the owner of the @thatmombeth business account. It does not access direct messages, other people's private content, or accounts that Beth has not authorized.
What the site can read from Pinterest:
- Beth's own boards, board sections, and Pins
- Pin and account-level organic performance metrics
- Product tags attached to Beth's Pins
What the site can send to Pinterest:
- Beth's original images or videos and their titles, descriptions, links, and alt text
- The destination board or board section for each Pin
- Product tags that connect eligible product Pins to Beth's original Pins
The OAuth permissions requested are boards:read,
boards:write, pins:read,
pins:write, and user_accounts:read. Access and
refresh tokens are stored in private server-side storage under Beth's
control and are used only for her Pinterest content workflow. We do not
sell or share them.
Data we read from TikTok
The site uses TikTok's official Display API, with one-time OAuth authorization from the @thatmombeth account holder, to fetch metadata for her own public videos. The fields we read are:
- Video ID
- Public TikTok URL of the video
- Posted timestamp
- Video description (caption)
- Cover image (thumbnail) URL
- Embed HTML provided by TikTok
- Video duration in seconds
We do not read direct messages, follower lists, analytics, or any
other private data. The OAuth scopes requested are
user.info.basic and video.list — the
minimum required.
Where that data lives
Video metadata is stored in a Cloudflare D1 database under Beth's control. The site renders pages by reading from that database. We retain video records as long as the corresponding video remains relevant for the site's pitch material; on request, individual records can be deleted.
Sales attribution data
The site also displays affiliate sales totals that Beth exports from her TikTok Shop affiliate dashboard. This data describes her own earnings and the products she has promoted; it does not include personal information about purchasers.
Instagram & Facebook (Meta)
The site can cross-post Beth's own short-form videos to her Instagram and Facebook accounts. This uses Meta's Graph API, with one-time Facebook Login authorization from Beth as the owner of an Instagram Business account and a connected Facebook Page. The access is used to publish her own content — it does not read other people's posts, comments, followers, direct messages, or insights.
What we read from Meta:
- The ID and name of Beth's own Facebook Page
- The ID of the Instagram Business account linked to that Page
What we send to Meta:
- A video (one of Beth's own TikTok posts) and its caption, published as an Instagram Reel and/or a Facebook Reel to her own accounts
The OAuth permissions requested are
instagram_basic, instagram_content_publish,
pages_show_list, pages_read_engagement,
pages_manage_posts, and business_management —
the set required to identify her Page and its Instagram account and to
publish a Reel on her behalf. Access tokens are stored in the same
Cloudflare D1 database as the rest of the site and are used only to
publish her content. We do not sell or share them.
YouTube (Google)
The site can publish Beth's own short-form videos to her YouTube channel as Shorts. This uses the YouTube Data API, with one-time Google sign-in authorization from Beth as the owner of the channel. The access is used to publish and manage her own content — it does not read other people's videos, comments, subscriptions, analytics, or any channel other than hers. This app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
What the site does on YouTube (all on Beth's own channel):
- Uploads one of Beth's own videos as a YouTube Short
- Sets the video's title and description (affiliate links + FTC disclosure)
- Sets the "includes paid promotion" disclosure on paid/affiliate videos
- Posts the affiliate link as the video's first comment
The OAuth scope requested is
https://www.googleapis.com/auth/youtube.force-ssl — the
permission YouTube requires to upload a video, edit its description,
set the paid-promotion disclosure, and post a comment on Beth's own
channel. Access and refresh tokens are stored in the same Cloudflare
D1 database as the rest of the site and are used only to publish and
manage her content. We do not sell or share them. Use of YouTube data
is also subject to the
YouTube Terms of Service
and the
Google Privacy Policy.
Anonymous site analytics
The site records anonymous page-view and interaction events (such as copying a spark code or clicking a link) to understand how visitors use brand pages. This data is stored in the same Cloudflare D1 database as the rest of the site and is not shared with any third party.
What we collect:
- Page path visited (e.g. "/bloomchic")
- Event type (page view, button click)
- Country and approximate city (from Cloudflare's edge network, not IP geolocation lookups)
- Device type (mobile, tablet, desktop — derived from user-agent)
- Referrer URL and UTM campaign parameters
- An anonymous session identifier (a one-way hash that cannot be reversed to identify you)
What we do not collect:
- IP addresses (used only momentarily to generate the anonymous session hash, then discarded)
- Names, email addresses, or any personally identifiable information
- Cookies — the analytics system is entirely cookie-free
Cookies
The public site does not set tracking cookies. Internal admin pages, accessible only to Beth and authorized collaborators behind Cloudflare Access, use short-lived session cookies for authentication and CSRF protection.
Logs
Cloudflare may retain standard server logs (IP, user agent, request path) for operational and security purposes per Cloudflare's own privacy practices. We do not enrich, sell, or otherwise process those logs.
Disconnecting TikTok
The TikTok account owner can revoke this site's access at any time from TikTok's app-management settings. Revocation stops further data collection immediately; existing stored records can be deleted on request.
Disconnecting Instagram & Facebook
Beth can revoke this site's access to her Instagram and Facebook accounts at any time from her Facebook Business Integrations settings. Revocation immediately stops any further publishing. To request deletion of stored Meta access tokens or account identifiers, email the address below.
Disconnecting YouTube (Google)
Beth can revoke this site's access to her YouTube channel at any time from her Google Account permissions page. Revocation immediately stops any further publishing. To request deletion of stored Google/YouTube tokens or video identifiers, email the address below.
Disconnecting Pinterest
Beth can revoke this site's access from the connected-app controls in her Pinterest account settings. Revocation immediately stops further reading and publishing. To request deletion of the stored Pinterest OAuth tokens, email the address below. Board, Pin, and analytics data are fetched live from Pinterest rather than retained by this site.
Contact
Privacy questions or data-removal requests: hello@thatmombeth.com.