Privacy Policy

Last updated: 10 October 2026

OneSocial is a browser extension that lets an individual creator publish their own posts (text, photos, video) to their own accounts on social networks — X, Bluesky, Telegram, Tumblr, Instagram, Threads, Pinterest, YouTube and TikTok — through each network's official API. A post is sent only when the creator clicks “Publish”.

Data stored on your device

Access tokens for the networks you connect, your settings (tags, link), your draft and a log of your last 30 publications (time, network, link to the post).
All of this is kept in the extension's storage in your own browser. It is not sent to our servers.
Your passwords never reach OneSocial: you sign in on each network's own page.

Data that passes through our server

Our server (onesocial.one-tools.workers.dev) has no database and keeps no logs of request contents. It is used only to:

show the page a network returns you to after sign-in;
exchange a sign-in code for an access token where the network requires our app secret — the token passes through in transit and is not stored;
for TikTok, relay your publishing requests to TikTok's API (TikTok does not accept them directly from a browser). Your access token passes through in transit and is not stored or logged; your video file goes directly to TikTok, not through our server;
for Instagram, Threads and TikTok photos, hold a photo or video temporarily so the network can fetch it. The file is deleted right after publishing and in any case automatically within 24 hours. It is reachable only at a random, unlisted address, and uploads are accepted only from accounts connected to OneSocial (our server checks the access with the network and does not keep it).

Licence check

Access to OneSocial is licensed. You sign in with your Google account (only your name, email address and Google account ID — no access to your Gmail, Drive or anything else). To check your licence, the licence service processes that email and account ID, a random device ID and the app version. It does not receive your social network tokens or your posts.

What we do not do

We do not sell, rent or share your data, show ads, run analytics or use your data to train AI models.
We do not read other users' data, messages, followers or timelines. We do not like, follow, comment or send messages on your behalf.

Data from Meta (Instagram, Threads)

We request only the permissions needed to show which account is connected and to publish posts you create: instagram_business_basic, instagram_business_content_publish, threads_basic and threads_content_publish. This data is used only for that purpose and stays on your device.

Data from Google (YouTube)

OneSocial uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service; Google's handling of data is described in the Google Privacy Policy. We request two permissions: youtube.upload, to upload the video you choose to your own channel, and youtube.readonly, to show which channel is connected. We do not read your other videos, comments, subscribers or analytics. OneSocial's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke OneSocial's access at any time with “Disconnect” in OneSocial or on your Google Account connections page.

Data from TikTok

We request user.info.basic and video.publish — to show which account the post goes to (TikTok's creator info: nickname, username, available privacy options) and to publish the video or photos you choose. “Disconnect” in OneSocial asks TikTok to revoke the access; you can also remove OneSocial in the TikTok app: Settings and privacy → Security → Apps and services.

Data from Pinterest

We request boards:read, boards:write, pins:read, pins:write and user_accounts:read — to show your username and boards, create a board if you ask, and create the Pin you publish.

Deleting your data

See Data deletion. In short: “Disconnect” in OneSocial deletes the access token from your device and, where the network supports it, asks the network to revoke it; removing the extension deletes everything it stored.

Contact

Questions about your data or this policy: support@onesocial.win.

Changes

If this policy changes, the date above changes with it.