Sephora

Privacy Policy

Privacy Policy for Sephora E-Sports

This policy explains how the Sephora E-Sports Discord / TikTok integration processes data when it is connected to an authorized TikTok account.

Last updated: 2026-08-31

1. Operator information

Operator / controller: [OWNER INFORMATION REQUIRED]

Contact details for privacy requests: [OWNER INFORMATION REQUIRED]

The operator information must be completed with the real responsible person or organization before this policy is published for a live TikTok Developer App.

2. Purpose of the integration

Sephora E-Sports is a Rocket League E-Sports community. The integration connects the authorized Sephora E-Sports TikTok account with the official Sephora E-Sports Discord server. Its purpose is to detect newly available public TikTok videos from that authorized account and publish a notification in Discord.

The integration does not publish TikTok videos, upload content, or post content to TikTok.

3. TikTok data processed

The integration may process data made available through the official TikTok API after OAuth authorization. Depending on the API scopes granted and TikTok API responses, this may include:

  • TikTok account identifiers such as an open ID.
  • Basic public profile information for the authorized account, such as display name or avatar URL, if provided by the API.
  • Public TikTok video information, such as video ID, title, description, creation time, duration, cover image URL, share URL, or embed link.
  • OAuth access tokens and refresh tokens required to keep the TikTok connection active.
  • Technical API response metadata, such as expiration times, scopes, status messages, or error information.

4. OAuth tokens

OAuth access tokens and refresh tokens are required to connect the authorized TikTok account to the integration. These tokens are used only to request the permitted TikTok API data needed for the Discord notification workflow.

Tokens are not shown publicly on this website, in Discord messages, or in public TikTok posts. Tokens should be stored securely by the bot or hosting environment and must not be committed to public source code repositories.

5. Discord data processed

The integration may technically process Discord IDs or Discord server/channel identifiers where needed to send notifications to the correct official Discord location. This may include server IDs, channel IDs, message IDs, or related technical identifiers.

Discord data is used only to operate the notification feature and to prevent duplicate or incorrect notifications.

6. Why data is processed

The data is processed for the following purposes:

  • To maintain the OAuth connection to the authorized TikTok account.
  • To check for new public TikTok videos from the authorized account.
  • To create Discord notifications about those public videos.
  • To operate, secure, troubleshoot, and maintain the integration.

7. No sale, advertising profiles, or unrelated sharing

Personal data is not sold. The integration does not create advertising profiles, does not use data for behavioral advertising, and does not share personal data with third parties for unrelated marketing purposes.

Data may be processed by technical service providers only where necessary to host or operate the bot, the website, the TikTok API connection, or Discord notifications.

8. Retention and deletion

OAuth data is kept only as long as needed to operate the authorized TikTok connection. Public video metadata and Discord notification records may be retained as needed to avoid duplicate notifications, audit bot behavior, or troubleshoot technical issues.

To request deletion of stored OAuth data or related integration records, contact: [OWNER INFORMATION REQUIRED].

9. Revoking TikTok authorization

The authorized TikTok account holder can revoke the TikTok authorization through TikTok's app or account settings, where TikTok provides controls for connected apps. Revoking authorization may stop the integration from accessing TikTok API data and may stop Discord notifications based on TikTok activity.

After authorization is revoked, stored OAuth tokens should be deleted from the integration's storage when the operator is notified or when the integration detects that the tokens are no longer valid.

10. TikTok and Discord privacy terms

TikTok and Discord process data under their own privacy policies and terms. Users should review TikTok's own privacy information at TikTok Privacy Policy and Discord's privacy information at Discord Privacy Policy.

11. Changes to this policy

This policy may be updated if the integration, API scopes, hosting setup, or legal requirements change. The latest version should be made available on this website.

Website data from Discord

This website shows public community information from the Sephora E-Sports Discord server: member and online counts, open scrims, and the display names and profile pictures of team members listed in the roster. No messages or private data are published. Team members can ask to be removed from the roster at any time via a Discord ticket.

Scrim request form

When you submit the scrim request form, the data you enter (team name, Discord name, optional e-mail address, preferred date and message) is sent by e-mail to sephoraesports250@gmail.com using the form service FormSubmit (formsubmit.co) and forwarded through a Cloudflare Worker to a private staff channel on our Discord server, where the team approves or declines the request. Approved scrims show your team name publicly on Discord and on this website; your e-mail address is never shown publicly. We only use it to plan scrims and delete it when it is no longer needed.