1. Who we are
FYP Roulette ("FYP Roulette", "we", "us" or "our") provides a private social game in which invited players guess who liked a TikTok video. Questions about this policy or privacy requests can be sent to [email protected].
2. Scope
This policy applies to the FYP Roulette mobile app, its multiplayer room service, and this website. FYP Roulette is an independent product and is not sponsored, endorsed by, or affiliated with TikTok.
3. Information we process
Profile and TikTok information
When you connect TikTok, the app processes your TikTok username, user ID, display name, avatar, biography, public profile statistics, and liked-video information such as post IDs, captions, creator details, thumbnails and playback links.
TikTok sign-in and session data
TikTok sign-in takes place in an in-app browser controlled by TikTok. The app reads the TikTok session needed to import your likes. The app first attempts the import on your device. If that attempt returns no usable likes, it sends your TikTok username and session token over HTTPS to our service for a one-time fallback request to TikTok. We use the token only to complete that request; we do not put it in application logs or a persistent database.
Game and room information
When you create or join a room, we process a randomly generated local player ID, display name, TikTok handle, avatar reference, room code, selected liked-video metadata, connection status, guesses, scores and other events needed to run the game. Other invited players in the same room can see profile information, the videos selected for that room, guesses and scores as part of play.
Purchases
Apple processes payment details. RevenueCat processes an app user identifier and purchase or subscription status so that we can unlock FYP+ and restore purchases. We do not receive your full payment-card details.
Network and diagnostic information
Our service necessarily receives network information such as IP address, request time, endpoint and basic connection data. We use IP addresses in short-lived, in-memory counters to prevent abuse. Server and infrastructure providers may also create operational logs for security, reliability and troubleshooting.
Website
These legal pages do not set advertising or analytics cookies. Our hosting provider may process standard web-server data such as IP address, user agent and request time to deliver and protect the site.
4. Where information is stored
Your FYP Roulette profile, imported likes library, excluded and played video IDs, usage counters, and cached avatar are stored locally on your device. Multiplayer room data is held in server memory rather than a user-account database. It is temporary, but may remain until the room is removed or the service restarts. To apply the free-game allowance, our server keeps a count of free games hosted, stored against one-way hashes of your TikTok account identifier and a random identifier saved in your device's keychain. It contains no names, handles, likes or videos. Purchase entitlement information is held by Apple and RevenueCat under their own retention practices.
5. Why we use information
- To import and display the TikTok content you choose to use.
- To create invite-only rooms, synchronise rounds, calculate scores and reconnect players.
- To provide, verify and restore FYP+ subscriptions.
- To protect the service, rate-limit requests, diagnose faults and prevent misuse.
- To comply with law and enforce our Terms of Use.
Where UK or EEA data-protection law applies, our legal bases are performance of our contract with you, our legitimate interests in operating and securing the service, compliance with legal obligations, and consent where the law requires it.
6. Service providers and disclosures
We share information only as needed to operate the service:
- TikTok, for sign-in, profile and video requests, and playback.
- Apple, for App Store distribution, payment and subscription management.
- RevenueCat, for subscription entitlement and purchase restoration.
- TikTok data and infrastructure providers, including API, cloud-hosting and content-delivery providers used to retrieve public TikTok metadata, serve the app, secure it and troubleshoot faults.
- Other players you invite, as described in the game-and-room section above.
- Authorities or transaction parties, if required by law, necessary to protect rights and safety, or connected to a business reorganisation.
Some providers may process data outside the UK or EEA. Where required, we rely on recognised safeguards for international transfers.
7. What we do not do
We do not sell your personal information. We do not use it for third-party advertising, and we do not ask TikTok for permission to post to your account. FYP Roulette has no public user directory or public room list.
8. Retention and deletion
Local data remains until you use Sign out & clear local data, uninstall the app, or clear the app's storage. TikTok web cookies can also be cleared through sign-out. Room data is temporary and is not written to our application database. The hashed free-game count is kept while the service operates so the allowance cannot be reset by reinstalling; contact us to have it removed. Infrastructure logs may be kept for a limited period for security and operations. Records that Apple and RevenueCat must keep for purchases follow their own retention requirements.
9. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal information, receive a portable copy, or withdraw consent. You may also complain to your local data-protection authority; in the UK, this is the Information Commissioner's Office. Email [email protected] to make a request. We may need enough information to verify and complete it.
10. Children
FYP Roulette is not directed to children under 13. You must also meet the minimum age required to use TikTok and the App Store in your country. If you believe a child has provided personal information contrary to these rules, contact us so we can investigate and delete it where appropriate.
11. Security
We use measures intended to protect information, including HTTPS in transit, limited-purpose session-token handling, server-side secrets, rate limiting and avoiding a persistent room database. No system is completely secure, so we cannot guarantee absolute security.
12. Changes
We may update this policy as the product or law changes. We will post the revised policy here and update the effective date. If a change materially affects your rights, we will provide additional notice where appropriate.
13. Contact
Email privacy and support questions to [email protected].