Privacy policy

Last updated 16 September 2026

Short version: poster.llokq runs on your own computer. Your videos, your captions, your queue and your platform tokens stay there. We operate no server that takes part in publishing, so there is no copy of any of it on our side. There is no analytics, no advertising and no tracking.

1. Who is responsible

The data controller is LLOKQ LTD, a private limited company registered in England and Wales under company number 16469909, with its registered office at 71-75 Shelton Street, London, England, WC2H 9JQ. In this policy, "we" and "us" mean LLOKQ LTD, and "the app" means poster.llokq. For anything written here, including a request to exercise your rights, write to hello@llokq.com.

2. What stays on your machine

All of the following is written to your own disk by the app, and is never transmitted to us:

Your media and captions. Video files stay where you put them. The app reads them at publish time and uploads them from your machine straight to the platform you chose.
The queue. A local database file holding each post: file path, caption, destination account, due time, status, and the platform's own ID once it is published.
Platform credentials. Access and refresh tokens for each account you connect, in ~/.poster/accounts.json, and app keys in ~/.poster/.env. Both are written readable only by your user account.
Consent records. For platforms that require per-post creator choices, such as TikTok's privacy level, commercial disclosure and interaction settings, your answers are stored against that post so the app can prove what you agreed to, and refuse to publish what you did not.
Logs. What was attempted, what the platform answered, and why something failed.

We have no access to any of it. Not by agreement, but by architecture: the app has no telemetry and no account with us, and it makes no request to a llokq server while it runs.

3. What the platforms receive

When you connect an account, you authorize the app on that platform's own pages, and the platform issues a token to your machine. When a post publishes, your machine sends that platform the video, the caption and the settings you chose for it. That is the platform's own processing, under the platform's own privacy policy: TikTok, Google, for YouTube, and Meta, for Instagram and Facebook.

The app reads from a platform only what it needs to publish correctly: the identifier of the account that granted the token, and the posting options that account is allowed. It does not read or store profile details, follower lists, direct messages, analytics about other people, or anyone else's content.

4. What we do hold

Very little, and none of it comes from the app:

Correspondence. If you email us, we keep the email and our reply.
Access requests. While the app is in private beta, the email address you write from and what you tell us about how you intend to use it.
Purchase records, if and when the app is sold. Payments would run through Polar as merchant of record, which holds the card and billing details; we would never see or store a card number.
Server logs for this website. Our hosting provider keeps standard logs, including IP address, browser type and pages requested, for security and to keep the site up.

This website runs no analytics, no advertising and no third-party tracking, and sets no cookies for any of that.

5. Why we are allowed to hold it

Under the UK GDPR, correspondence and access requests are processed under our legitimate interest in answering people who contact us and in running a beta. Any purchase record would be processed to perform the contract with you, and kept afterwards to meet legal and tax obligations. Website server logs are processed under our legitimate interest in keeping the site secure and working.

6. Who else sees it

Our email and hosting providers, as processors, for delivering mail and serving this site. Polar, for payments, if and when the app is sold. Nobody else. We do not sell your data, share it with advertisers, or hand it to anyone else except where the law requires it. Where a provider processes data outside the UK or the EEA, transfers rely on the safeguards the law requires.

7. How long it is kept

Data on your machine is kept until you delete it, and we cannot delete it for you. Emails are kept for up to two years. Access request records are kept until the beta ends. Purchase and tax records would be kept for six years, because tax law requires it. Website server logs are kept for up to 90 days.

8. Deleting things

Disconnect an account in the platform's own settings, which invalidates the token immediately. For TikTok: Settings and privacy, Security and permissions, Manage app permissions.
Remove stored credentials with poster tiktok remove <handle>, or by deleting ~/.poster/, which removes every credential the app holds.
Delete the queue by deleting the app's database file. Posts already published live on the platform and are deleted there, by you, like any other post.
Ask us at hello@llokq.com to delete the correspondence and access-request records described in section 4.

9. Your rights

You can ask for a copy of the data we hold about you, ask us to correct it, ask us to delete it, ask us to restrict or stop processing it, object to processing based on legitimate interests, and ask for it in a portable format. Write to hello@llokq.com and we will answer within one month.

If you think we have handled your data badly, please tell us first so we can fix it. You also have the right to complain to the Information Commissioner's Office at ico.org.uk, or to the supervisory authority where you live.

10. Children

poster.llokq is for adults publishing their own work. It is not directed at children, and we do not knowingly collect personal data from anyone under 13.

11. Security

Traffic to this site is encrypted in transit. Credential files written by the app are created readable only by your user account, and the app holds no credential anywhere else. Access to what little we do hold is limited to the people who run llokq, which today is one person. No system is perfect, and if a breach ever affects your rights we will tell you and the ICO as the law requires.

12. Changes

If this policy changes, the date at the top changes with it, and we will tell anyone we have an address for about anything significant.