KingFeed

Privacy Policy

Last updated: September 4, 2026

1. Data We Collect

  • Account data: username, optional email, password (stored as a bcrypt hash — never plaintext).
  • Session data: signed session cookie, IP address, user-agent, timestamps.
  • Connected accounts: handles and API tokens for third-party platforms you link. Tokens are encrypted at rest using AES-256-GCM.
  • Content you upload: videos, images, titles, descriptions, hashtags, and metadata you provide for posting.
  • Operational data: post status, error logs, and an audit trail of security-relevant actions (sign-in, permission changes).

2. How We Use Your Data

Only to operate the Service: authenticate you, dispatch your content to the platforms you designate, enforce quotas, and secure the Service against abuse. We do not sell your data.

3. Third Parties

To fulfill posting, we transmit your content and tokens to the third-party platform APIs you have explicitly connected (e.g., YouTube, Instagram). Each third party operates under its own privacy terms.

4. Cookies

We use strictly necessary cookies for authentication (as_session) and CSRF protection (as_csrf). We store an in-browser consent record (as_consent) if you accept cookies. See our Cookie Policy.

5. Retention

Account data is retained until you delete your account. Media is retained until you delete the post. Audit logs are retained for 90 days. Sessions expire after 14 days.

6. Security

  • Passwords are hashed with bcrypt (cost 12).
  • Session and CSRF cookies are signed with HMAC-SHA-256.
  • OAuth tokens and API keys are encrypted with AES-256-GCM.
  • CSRF tokens are required on all mutating requests.
  • A strict Content Security Policy, HSTS-ready configuration, and rate limits are in place.

7. Your Rights

You can access, correct, export, or delete your data at any time from your settings, or by contacting the site owner. Depending on your jurisdiction, you may have additional rights under GDPR / CCPA / other privacy laws.

8. Children

The Service is not directed to children under 13. If we learn that we have collected personal information from a child under 13, we will delete it.

9. Changes

We may update this Policy. Material changes will be indicated by updating the "Last updated" date above.

10. Contact

For privacy questions, contact the site owner.