Loading page
About this tool
28-point TikTok privacy audit — private account, suggestions, duet and stitch permissions, video downloads, DM controls and ad personalisation.
The TikTok Privacy Settings Checklist covers the 28 TikTok settings that decide who can find your account, what other people are allowed to do with your videos, who can message you and how much of your activity feeds advertising. It leads with the private-account switch and the four separate 'suggest your account to others' toggles, then the reuse permissions — downloads, duet, stitch and comments — that stay open even on tidy accounts. Ad personalisation and partner data are treated as two controls because they are, and both are opt-out.
Open TikTok Privacy Settings Checklist on AltFTool — it loads instantly in your browser.
Answer "Who are you locking this down for?" — private personal account, creator with a public account, or teen account — and set a Target score (%).
Work down the 28 rows grouped as Account visibility, What people can do with your videos, Who can reach you, Data and advertising, and Account security, ticking each after you apply it in TikTok.
Watch Protection score, held at 69% while any Critical setting is open, plus Remaining exposure by area; Copy result exports what is still to do with its menu path.
Contacts, Facebook friends, profile-link visitors and mutual connections are separate switches, and turning off one does nothing for the others.
Downloads, duet and stitch determine what happens to a video after it leaves your profile.
A creator cannot go private, so the score shifts to content permissions and comment filtering.
Settings and privacy > Privacy > Suggest your account to others, then turn off all four options individually: contacts, Facebook friends, people who open or send your profile link, and people with mutual connections. Also turn off contact syncing and delete the contacts already uploaded, since that is what feeds the suggestions.
Settings and privacy > Privacy > Downloads, switched off. That stops the in-app save that produces a watermarked file anyone can re-upload. Screen recording still works, so treat it as friction rather than a guarantee, and note that a private account disables duet and stitch as well.
Accounts registered as 13 to 15 are set to private by default and direct messaging is disabled for accounts under 16. Comment and duet options are also restricted for younger accounts. None of that applies once the registered age is 16 or over, so an account with an incorrect birth date gets adult defaults.
No. Personalised ads and 'ads based on data received from partners' are two separate controls, and both are opt-out. Turning either off changes how the data is used for targeting, not whether your in-app activity is recorded — the personalisation and content-preference settings govern that separately.