Privacy Policy
This page explains how Alt F Awesome handles personal data when you use apps.altfawesome.com (CAST, PING, Redirects, and related tools). This is not legal advice.
Last updated: 2026-09-23
Who we are
Controller: Alt F Awesome.
Contact: daniel@altfawesome.com.
What these apps do
CAST is a Storyblok sidebar app that helps editorial teams design social posts and, with their permission, publish to platforms they connect (Facebook, Instagram, TikTok, and YouTube). PING and Redirects are separate Storyblok tools on the same domain. Alt F Awesome owns the developer apps; publishers connect their own accounts.
What data we collect
- Storyblok login: OAuth tokens so CAST can read stories and assets in the space you authorised.
- Meta (Facebook / Instagram): tokens, Page names, and Instagram usernames needed to list Pages and publish posts you request.
- TikTok Login Kit / Content Posting: TikTok
open_id, display name, access and refresh tokens, and the scopes you grant, so CAST can link a TikTok account to a Storyblok space and (after App Review) publish content you request. - YouTube Data API: channel id, channel title, access and refresh tokens, and the scopes
youtube.uploadandyoutube, so CAST can link a YouTube channel to a Storyblok space and upload a video you request. Until Google completes an API audit, those uploads are unlisted. - Content you create in CAST: headlines, captions, images, and schedule data stored for that space.
- Technical data: IP address and request logs processed by hosting/CDN (Vercel) to deliver and secure the service.
We do not sell personal data. We do not use TikTok or YouTube data to build consumer profiles or ads.
Why we process data
- To provide the apps you signed in to (contract / pre-contract steps).
- To publish to YouTube, TikTok, Instagram, or Facebook only after you connect the account and start a publish action.
- To keep the service working, secure, and reliable (legitimate interests).
Sharing and processors
Tokens and content stay isolated per Storyblok space. We use processors such as Vercel (hosting), Upstash Redis (sessions and tokens), and the social platforms you connect (YouTube, TikTok, Meta). We share data with those platforms only to perform the action you requested (login or publish).
Retention
OAuth tokens are kept until you disconnect the account, they expire, or we delete the space connection. Technical logs follow our hosting provider’s retention.
Your rights
You may have the right to access, correct, delete, restrict processing, object, and data portability. Email daniel@altfawesome.com. You can also lodge a complaint with your local supervisory authority.
To stop CAST using TikTok or YouTube data, disconnect that platform in CAST or revoke access in the platform account settings.
Security
We use HTTPS, per-space token storage, and reasonable organisational measures. No method of transmission or storage is 100% secure.
Changes
We may update this policy. The “Last updated” date shows the most recent change.