Last updated 29 August 2026
The Unlikely Stories is a private publishing tool, operated by one individual for that individual’s own social media accounts. It has no users other than its operator, and it collects nothing from visitors to this website.
These pages set no cookies, load nothing from third-party servers, and run no analytics. No visitor data is collected, logged for identification, or shared.
When the operator connects the tool to TikTok through TikTok’s own login screen, the tool receives and uses:
user.info.basic — the
account’s open ID, display name and avatar — used to show which account is
connected;Under video.upload and video.publish, the tool sends videos to that
same account. It does not read the account’s existing videos, its statistics, its followers
or its messages, and it holds no scope that would allow it to.
The equivalent applies to Instagram: an access token and an account identifier, obtained through Instagram’s own login, used only to publish to that account.
Finished videos are stored in a private Cloudflare R2 bucket. The bucket has no public address. Files are reachable only through links that are cryptographically signed and expire, and such a link is issued to a platform solely so that it can fetch a video being published.
Tokens are held as encrypted secrets inside a Cloudflare Worker. They are never written to a browser, never stored in the project’s source repository, and never sent anywhere except to the platform that issued them. Transport is HTTPS throughout.
No data is sold, rented, traded, or shared with advertisers, data brokers or any third party. Data goes to exactly two places: the platform it came from, and the infrastructure provider named above (Cloudflare), acting as a processor.
Tokens are kept for as long as the connection is in use, and are destroyed when it is withdrawn or when they expire. Video files are kept while they remain useful to the channel, and are deleted afterwards.
The operator may disconnect the tool at any time from TikTok › Settings and privacy › Security and permissions › Manage app permissions, and from the equivalent screen on Instagram. Withdrawal takes effect immediately: the token stops working, and the tool can no longer publish.
Because the tool processes only its own operator’s account data, requests for access, correction or erasure can be made directly to the address below, and will be answered.
If what the tool does with data changes, this page changes with it, and the date above records the revision.