Privacy Policy

1. Overview & Scope

At WAIT UNTIL YOU TRY ("we," "us," or "our"), respecting and protecting your privacy is a foundational principle. This Privacy Policy governs your use of our official website at waituntilyoutry.com, our media distributions, and our developer publishing application, Wait Until You Try Publisher.

This policy explains what information we collect, how that information is handled, our strict security practices, and your legal rights under applicable privacy laws, including the European Union General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA/CPRA), and the TikTok Developer Terms of Service.

2. Information We Collect

We believe in strict data minimization. We only collect the bare minimum information necessary to operate our website and publishing tools:

• Technical Server Logs: When you browse waituntilyoutry.com, our Nginx web server automatically records standard non-personally identifiable technical logs (such as your IP address, browser user-agent, operating system, requested URL, HTTP status code, and timestamp). These logs are utilized strictly for server health, diagnostic troubleshooting, and protection against malicious traffic.
• Direct Communications: If you voluntarily contact us through our official Contact Form, we receive your name, email address, and message contents strictly to respond to your inquiry. We never use this information for marketing or spam lists without explicit opt-in.
• Social Media Interactions: If you publicly comment, like, or subscribe to our channels on YouTube, TikTok, or Instagram, your interaction is governed by the respective platform's privacy policy. We do not harvest or export user profiles from those platforms.

3. TikTok Developer Platform & OAuth Data Handling

When interacting with the TikTok API:

• Purpose of Access: We request API permissions (such as user.info.basic, user.info.profile, video.publish, and video.upload) strictly to verify channel ownership and upload authorized, creator-produced recipe videos and captions directly to our official TikTok account.
• No Viewer Data Harvested: The application does NOT collect, harvest, inspect, store, or sell any personal data of viewers, visitors, or third-party TikTok users.
• Token Storage & Security: OAuth access tokens and refresh tokens received via https://waituntilyoutry.com/callback are stored strictly on our encrypted, firewall-protected production servers. They are never exposed to the public browser, client-side scripts, or external third parties.
• Zero Commercialization: TikTok user tokens, profile data, or publishing credentials are never sold, rented, leased, traded, or shared with advertisers, data aggregators, or brokers.
• Revoking Access: Channel administrators can revoke application access at any time directly through TikTok by navigating to Settings and privacy > Security & permissions > Apps and services > Wait Until You Try Publisher > Remove Access. Revocation immediately invalidates all active tokens.

4. How We Use Information

The information we collect is processed solely for the following legitimate purposes:

• To serve and maintain the stability, performance, and security of waituntilyoutry.com.
• To diagnose server errors and defend against automated Denial of Service (DoS) attacks.
• To publish our short food films and recipe songs to official brand channels.
• To respond to user inquiries, press questions, or rights requests sent to our contact email.
• To comply with applicable legal obligations and developer platform standards.

5. Cookies & Technical Logging

No Tracking Cookies: WAIT UNTIL YOU TRY does not deploy third-party advertising cookies, retargeting beacons, cross-site tracking pixels, or fingerprinting scripts on waituntilyoutry.com.

Essential Cookies: Our web server may utilize transient, strictly essential HTTP session cookies for load balancing or security. Embedded third-party elements (such as embedded YouTube Shorts players) may set platform-specific cookies governed by Google's Privacy Policy when initiated by the user.

6. Zero Sale & Zero Sharing of Personal Data

We do not sell, rent, lease, trade, or monetize any personal information or developer API data under any circumstances. We will never disclose your information to third parties except:

• To our trusted hosting infrastructure provider (Namecheap VPS) solely to host the web server and route encrypted traffic.
• When strictly required by valid law, subpoena, or governmental regulatory authority.
• To protect the legal rights, safety, and property of WAIT UNTIL YOU TRY, our visitors, or the public.

7. Data Security & Retention

We implement rigorous administrative, technical, and physical safeguards to protect all data:

• End-to-End Encryption: All data transmitted to and from waituntilyoutry.com is encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS via Let's Encrypt certificates).
• Access Controls: Server infrastructure is accessible only via secure SSH keys with password authentication disabled and strict firewall rules.
• Retention Period: Technical web server access logs are automatically rotated and permanently purged within thirty (30) days. Direct email communications are retained only as long as necessary to resolve the inquiry.

8. User Rights (GDPR & CCPA/CPRA)

Depending on your location, you may have specific statutory rights regarding your personal information:

• Right to Know / Access: You have the right to request details regarding what personal information we hold about you.
• Right to Erasure ("Right to be Forgotten"): You have the right to request that we delete any personal information we hold about you.
• Right to Rectification: You have the right to correct any inaccurate personal data.
• Right to Non-Discrimination: We will never discriminate against you for exercising any of your legal privacy rights.

To exercise any of these rights, please submit a written request via our official Contact Form (select "Privacy & Data Protection"). We will acknowledge and verify your request within 48 hours without fee.

9. Children's Privacy (COPPA)

Our website and developer tools are not intended for or directed to children under the age of 13 (or under 16 in the EEA). We do not knowingly collect or solicit personal information from children. If you believe a child has provided us with personal information, please contact us immediately via our Contact Form and we will promptly expunge the data.

10. Contact Us & Privacy Requests

If you have questions, comments, or data deletion requests regarding this Privacy Policy or our TikTok Developer integration, please contact our Data Protection Officer at: