What you submit
When you use the downloader, you submit a TikTok URL and the form’s anti-abuse field. The Worker validates and normalizes the URL before sending the public link to the configured Apify actor. Do not submit passwords, cookies, private links, or personal information.
Temporary processing
The Worker stores a normalized extraction result in a Cloudflare Durable Object for the configured cache window so repeated clicks do not run the same Apify extraction repeatedly. The current default is 24 hours. Cached results expire automatically and are not intended to be a permanent content library.
Download tokens are short-lived and single-use. The browser receives the tokenized same-origin download route, not the upstream media URL. The Worker uses a short-lived used-token marker to prevent repeated downloads from the same token.
Optional browser history
After a successful check, the interface can store the public TikTok URL, media type, caption, creator label, and local timestamp in your browser’s local storage. This recent list is limited to six items and is not uploaded as an Hdttsave.bond account or cloud library.
You can pause future history from the downloader or clear the saved list at any time. Disabling history does not erase existing entries until you choose Clear. Browser private mode, storage controls, or site-data deletion can also remove or prevent this local history.
Abuse prevention
To keep the service available and protect the extraction budget, the Worker may process a salted hash of the connecting IP address as a Durable Object identifier for a short rate-limit window. The raw address is not displayed in the UI or intentionally stored as account data. Cloudflare may process request metadata as part of its infrastructure and security services.
Third-party services
Extraction is performed through Apify using the site operator’s private API credential. Upstream TikTok and media hosts may receive the public URL as needed to resolve the requested post. Their own privacy policies and terms apply. Preview images and media downloads can be served from upstream hosts through the Worker.
Cookies and advertising
This launch version does not require an account or a first-party cookie for downloading. If advertising, analytics, or consent tools are added later, this policy and the consent experience must be updated before they are enabled.
Your choices
You can stop using the service at any time. For a privacy question, send a clear description of the request to copyright@hdttsave.bond. Do not include passwords, API keys, or private media in an email.
Important: this service is for public content you own or are authorized to download. It is not designed to identify anonymous users, create a personal media archive, or bypass access controls.