Loading page
About this tool
28-point TikTok privacy audit — private account, suggestions, duet and stitch permissions, video downloads, DM controls and ad personalisation.
This checklist covers the 28 TikTok settings that decide who can find your account, what other people are allowed to do with your videos, who can message you and how much of your activity feeds advertising. It leads with the private-account switch and the four separate 'suggest your account to others' toggles, then the reuse permissions — downloads, duet, stitch and comments — that stay open even on tidy accounts. Ad personalisation and partner data are treated as two controls because they are, and both are opt-out.
Open TikTok Privacy Settings Checklist on AltFTool — it loads instantly in your browser.
Add your input to the workspace.
Adjust the options until the result looks right.
Copy or download the output and put it to work.
Contacts, Facebook friends, profile-link visitors and mutual connections are separate switches, and turning off one does nothing for the others.
Downloads, duet and stitch determine what happens to a video after it leaves your profile.
A creator cannot go private, so the score shifts to content permissions and comment filtering.
Settings and privacy > Privacy > Suggest your account to others, then turn off all four options individually: contacts, Facebook friends, people who open or send your profile link, and people with mutual connections. Also turn off contact syncing and delete the contacts already uploaded, since that is what feeds the suggestions.
Settings and privacy > Privacy > Downloads, switched off. That stops the in-app save that produces a watermarked file anyone can re-upload. Screen recording still works, so treat it as friction rather than a guarantee, and note that a private account disables duet and stitch as well.
Accounts registered as 13 to 15 are set to private by default and direct messaging is disabled for accounts under 16. Comment and duet options are also restricted for younger accounts. None of that applies once the registered age is 16 or over, so an account with an incorrect birth date gets adult defaults.
No. Personalised ads and 'ads based on data received from partners' are two separate controls, and both are opt-out. Turning either off changes how the data is used for targeting, not whether your in-app activity is recorded — the personalisation and content-preference settings govern that separately.