Is Tiktok Collecting More Data Than Ever? Fact-Checking the Latest Privacy Policy Outrage
At the center of global regulatory scrutiny sits the corporate relationship between TikTok and its Beijing-based parent entity, ByteDance.
Despite investments into dedicated isolation frameworks, most notably Project Texas in the United States and Project Clover in Europe, ByteDance data transfer rules still account for global operational support. Independent audits have repeatedly highlighted that software engineers based outside the host countries can review specific, anonymized telemetry metrics under defined diagnostic protocols.
Data retention policies state that user information is stored as long as necessary to fulfill business purposes, resolve legal disputes, and enforce agreements. Even after an account is deactivated, cached copies, associated metadata, and interaction logs linger in backup servers for months.
For younger audiences, COPPA compliance minors protocols establish a split experience. In the United States, children under 13 are directed to an age-gated version that blocks direct messaging, restricts video uploading, and halts targeted advertising. Enforcement relies heavily on age self-declaration during registration, leading watchdogs to scrutinize how effectively behavioral analytics detect underage accounts masquerading as adults.