Privacy Policy
Last updated: 2026-11-13
Scope and operator
This policy explains the public Class System website and Discord–TikTok account linking, operated by the Class System project maintained by cl4ss. Bot features used inside a Discord server also depend on that server’s configuration and rules.
The public website
These information and policy pages can be read without signing in. They do not request your Discord or TikTok password and do not contain advertising or third-party analytics trackers. Our hosting provider, Cloudflare, processes request and network information, such as IP addresses and security diagnostics, to deliver and protect the website. Hosting and security records are subject to the provider’s retention practices.
Information used for account linking
When account linking is enabled and you choose to authorize it, we receive your Discord account ID and name, TikTok app-specific account ID, TikTok username and display name, and the time the link was verified. These identify the accounts you chose to connect. We do not request your email address, private messages, contacts, or permission to publish TikTok videos as part of linking.
How linking data is used
Verified identities are used to establish and display your account connection, prevent duplicate or fraudulent links, and support features you choose to use in your Discord community. No watch-time rewards begin merely because you authorize or link an account. Account links are not published as a public directory and are not sold for advertising.
Control panel and welcome images
The control panel lists servers where you have Administrator permission and Class System is online. It stores server configuration, channels, welcome image uploads, reward rules, and short-lived save requests with your Discord ID. Save request payloads are removed after confirmation or expiry; completed request status is cleaned after one day. Uploaded welcome images are retained on the bot hosting volume for server operation. Gift rewards record provider gift identifiers, completed combos and coin totals to prevent duplicate rewards. Signing out removes your active control panel session. The panel remembers your chosen language in browser local storage.
Authorization and browser sessions
Authorization codes and access tokens are handled by the server for identity verification. The Discord–TikTok linking flow does not save access or refresh tokens. The control panel separately keeps an encrypted Discord access token in a server-side session for at most one hour to recheck server permissions; it does not save refresh tokens. Short-lived browser cookies protect the authorization flow; linking sessions expire after 30 minutes. Where a language preference cookie is used, it records only the selected page language. Public information pages do not need a tracking cookie.
Storage, access and retention
Account links are stored separately from existing bot settings and point balances. Access is limited to service operation and administration. Active link records remain until you disconnect or the operator removes them. Existing operational backups can retain older copies; disconnecting removes the active record but is not a promise of immediate erasure from every backup. Short-lived authorization sessions expire and are pruned as the linking service runs.
Optional LIVE rewards
A Discord server may separately enable estimated TikTok LIVE attendance and top-three rewards. The bot records reported public viewer IDs and usernames, detection timestamps, estimated attendance, configured prizes, and reward history. Detection can miss viewers and does not prove continuous viewing. A one-time LIVE comment code can bind a verified account link to its public LIVE viewer ID; the bot stores a short-lived hash of the verification code, not a chat transcript. Unclaimed reward lots expire seven days after earning; linking alone does not extend this deadline. Claimed rank points, verification bindings, and reward records remain with the Discord bot until removed under the server rules or through a data request. The public linking website does not itself start monitoring a LIVE.
Existing Discord bot data
Outside this website, enabled bot features can store Discord user and server identifiers, server configuration, point balances and activity history, tickets and transcripts, moderation records, and message or media logs. What is captured depends on the features and logging rules your server enables. Linking or unlinking TikTok does not reset or delete those separate records.
Your controls and requests
You can decline authorization without linking. When linking is available, authorize Discord on the linking page and choose Disconnect accounts to remove the active link. You can revoke app access separately in each platform’s account settings. For access, correction, deletion, or other privacy requests, contact Class System through Discord using the support instructions below. Do not send passwords, authorization codes, tokens, or client secrets in a support message.
Services involved and updates
Discord and TikTok handle their own sign-in, authorization and platform data under their respective policies. Cloudflare hosts these public pages; the bot and linking service may use separate hosting. These services may process information in different countries. We update this policy when the service’s data practices change and show the updated date above.