Privacy Policy

1. Scope

This policy covers the TokGrid browser extension and the public website at https://tokgrid.app. It does not cover TikTok, the Chrome Web Store, Tally, the payment processor, or any other third-party service you choose to use. Those services have their own policies.

2. What the extension reads

TokGrid is built for public TikTok pages you have opened. It reads information that is already present in the page: cards rendered in the DOM, read-only React props exposed by the page, and embedded page JSON. The fields can include video IDs, descriptions, counts, author details, product anchors, video qualities, and subtitle links, depending on what the page makes available.

The extension does not bypass login, CAPTCHA, or rate limits. It is intended for public, logged-out pages. It does not collect private messages, account credentials, or content that is not already loaded in the page.

3. Where page data is processed

Page data is processed locally in your browser. TokGrid does not upload page data to a TokGrid server. It does not overwrite fetch or XMLHttpRequest, does not intercept network requests, and does not make background TikTok API calls to collect data. There is no analytics or telemetry in the extension.

Settings and an encrypted subscription credential are stored in chrome.storage.local. Page content used by the panel is kept in the page context and is not sent to TokGrid.

4. What leaves the browser

Three narrow flows can involve a network request. They are separate from page data collection:

• Downloads and subtitles. When you click a download control, the extension requests the media or subtitle URL from TikTok media domains and writes the file locally. The request is user-initiated.
• Subscription validation. When you open the subscription flow, restore a token, refresh status, return from checkout, reopen the extension with a pending payment, or trigger a paid feature while a check is required, the extension contacts the license server at pandahi.cc. The request can include an account identifier, token, channel, and operation type. It does not include page data.
• Feedback forms. The Feedback tab opens a Tally-hosted form in a new page. The URL can be prefilled with a device ID, extension version, and interface language. The form content (email, review link, or message) is submitted by you on Tally’s page. The extension does not read, save, or upload those form contents and does not receive a host permission for Tally.

5. Permissions

The current extension manifest requests:

• storage — settings and the encrypted subscription credential.
• Host permissions for *.tiktok.com, *.tiktokcdn.com, and *.tiktokv.com — the read-only page script and user-initiated media/subtitle requests.
• Host permission for pandahi.cc — subscription activation, token restore, status refresh, return from checkout, and the pending-payment check.

The extension does not request downloads, webRequest,scripting, tabs, or <all_urls>. Single-file downloads use a local Blob and a download link. Batch downloads use the browser’s File System Access API and a folder you explicitly choose.

6. Storage and retention

• Settings stay in local extension storage until you clear them or uninstall the extension.
• The encrypted subscription credential stays until you sign out, clear it, or uninstall.
• The extension’s network activity log is kept in memory and is cleared when the page is refreshed.
• Downloaded files are written to the folder you choose and remain under your control.
• Tally submissions are handled by the operator for support and reward follow-up, subject to the form’s own terms.

7. This website

This website is a static site. It does not load a tag manager, advertising pixels, embedded videos, third-party fonts, or contact forms. It does not set its own cookies. When Google Analytics is enabled for the build (see below), GA may set its own cookies. The site is designed to be served by a static hosting provider, such as Cloudflare Pages; the hosting provider may process standard request metadata (such as IP address, user agent, and timestamp) for delivery, security, and abuse prevention under its own policy.

Google Analytics (enabled on this build)

This build uses Google Analytics 4 with measurement IDG-8SL1Y6HB4Q. GA4 may collect page views, approximate location derived from the request, device/browser information, and interaction events, and may set _ga cookies. TokGrid uses this only to understand aggregate website usage. You can block GA with browser settings, an extension, or a consent control where one is required. The extension itself does not contain Google Analytics.

8. Cookies

This website does not set its own cookies. If Google Analytics is enabled in this build, GA may set its own cookies as described above. The extension uses extension storage, not website cookies, for its settings.

9. Third parties

• Chrome Web Store — distribution and installation. Its own policies apply.
• pandahi.cc — subscription checkout and license validation.
• Tally — user-opened feedback and reward forms.
• Static hosting provider — website delivery and standard request logs.
• Google Analytics — when enabled for the site build.

TokGrid does not sell page data. It does not use page data for advertising. It does not share page data with the subscription server.

10. Your choices

• Clear settings and page data from the extension’s Settings tab.
• Uninstall the extension to remove its local extension storage.
• Refresh the page to clear the in-memory activity log.
• Choose your own download folder, or cancel a batch before or during a run.
• Block or delete analytics cookies in your browser if GA is enabled.
• Contact support to request help with a Tally submission or a privacy question.

11. Contact

For privacy questions or support, email pandahi.cc@gmail.com. Do not send page data, account credentials, or subscription tokens in a support request.

12. Changes

This policy may change as the extension and website evolve. The “Last updated” date at the top will change when it does. Material changes should be reviewed before the next public release.