Your data

What Ostrel reads, and why.

What Ostrel asks for, why, and how to remove it. The privacy policy has the formal version.

The short version

Your accounts, your numbers, your call.

You choose what to connectEach account connects through the platform's own sign-in screen, with the permissions listed below. Ostrel never sees your password. Official platform APIs only. Nothing is scraped.
Ostrel only acts when you askIt reads your own numbers. It publishes only the posts you schedule and confirm, and it never comments, messages, follows or deletes anything.
Encrypted, never soldAccess tokens are encrypted at rest. Nothing is sold, shared for advertising or used to train AI models.
Gone when you say soDisconnect a platform in Settings, or delete your Horrac account, and Ostrel's copy goes with it.

Platform by platform

Every permission, explained.

TikTok

What you grant

ProfileYour display name and profile picture, so Ostrel can show which account is connected.

Account statsYour follower, following, like and video counts, for the Overview dials and Monitor.

Your videosYour own videos' captions, lengths, cover images, publish times and view, like, comment and share counts, for Monitor, your Channel Report and best-time-to-post, and to match each post with the same video on your YouTube or Instagram.

PostingOnly when you schedule a post. Ostrel publishes the video you chose, with the caption, privacy level and interaction settings you picked, at the time you set. For now TikTok shows these posts only to you (see below).

What is kept

Your display name and counts, encrypted access tokens, and the reports Ostrel writes from your video stats. For a scheduled post: the video file until it is published, then deleted; the caption and settings you chose; and the post ID TikTok returns.

What never happens

Ostrel never downloads your videos from TikTok. What it sends to an AI model from TikTok is text (captions, dates, lengths and counts) and each post's cover image, the still TikTok's own API provides, so the AI can judge the cover. Ostrel fetches the cover fresh each time and keeps no copy. If you want Ostrel to watch a TikTok, it uses your own copy instead: the same video on your YouTube Shorts or Instagram Reels, or the original file on your computer. Before you post, Ostrel shows your nickname, lets you pick the privacy level with no default chosen for you, and leaves comments, duets and stitches off until you turn them on. Until TikTok approves Ostrel for public posting, TikTok itself makes every post from Ostrel visible only to you, whichever level you pick. Your post is not lost: you can change who sees it in the TikTok app.

YouTube

What you grant

Channel and videosYour channel name, subscriber count and your own videos, the same list YouTube Studio shows you.

AnalyticsYour own analytics: views, watch time, retention, traffic sources and audience age and gender.

PostingOnly when you schedule a post. Ostrel uploads the video you chose, with your title, description and schedule.

What is kept

Your channel name and stats, encrypted access tokens, your Channel Reports and anomaly alerts, and scheduled uploads until they publish. For AI analysis, Ostrel sends a small sample of your public videos to our frontier AI provider by link.

Ostrel's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Instagram

Instagram shares insights only with professional accounts, so Ostrel works with Business and Creator accounts. A personal account can switch to Creator for free in the Instagram app.

What you grant

Profile and postsYour username, profile picture, follower count and your posts.

InsightsReach, engagement and audience insights for your own account and posts.

PostingOnly when you schedule a post. Ostrel publishes the Reel or video you chose, at the time you set.

What is kept

Your account stats, encrypted access tokens, your Channel Reports and alerts, and scheduled posts until they publish. For AI analysis, a small sample of your Reels is sent to our frontier AI provider, which deletes it within 48 hours.

Twitch

What you grant

FollowersYour channel name and follower count.

Public channel dataNo extra permission: your past broadcasts, clips and whether you are live, with viewer counts, from Twitch's public API, for your stream stats, clip insights and Channel Report.

What is kept

Your channel stats, encrypted access tokens and your Channel Report. Public category and stream data, used for the best-time-to-stream heatmap, comes from Twitch's public API and is not tied to you.

Everything else

Your account, AI and payments.

Account

Your Horrac account is your email address. It is stored encrypted, and looked up with a keyed hash so the address itself is never used as a search key. Sign-in codes are sent by email through our email provider; if you sign in with Google, Ostrel receives only your verified email address.

On this website, signing in uses three strictly necessary cookies: one keeps you signed in, one tells the page to show your account menu, and one lasts ten minutes while you sign in with Google. There are no advertising, analytics or tracking cookies anywhere on horrac.com. Visits to the site are counted with Cloudflare Web Analytics, which uses no cookies and does not identify you. The privacy policy names each one.

AI

AI features run on frontier models from leading AI providers, through paid accounts whose terms exclude your content from model training. Videos sent for analysis are deleted by the provider within 48 hours. Everything else sent to an AI provider, such as your stats and questions, is kept by that provider only to check for misuse, for up to 55 days, then deleted. Clip suggestions send the audio of a draft you choose to a transcription service. When the daily web-search budget runs out, trend research falls back to a second search provider with only a short search topic. Every provider is named in our privacy policy.

To keep plans fair, Ostrel records how many credits each AI request used and which feature used them. It does not keep the content of your requests for that.

Payments

Checkout is run by Stripe, and purchases are sold through Link, Stripe's merchant-of-record service. Stripe handles your card details; Ostrel only stores your plan, its status and renewal date, and Stripe's customer and subscription IDs.

Where

Settings and a local cache stay on your computer, encrypted where they include credentials. Anything that has to keep working while the app is closed, such as weekly reports and scheduled posts, lives on our servers on Cloudflare. All traffic is encrypted in transit.

Removal

Disconnect a platform from Settings to stop Ostrel using it. Delete your account from Settings or from your account page to cancel any subscription and erase your data from our servers across every device you signed in on. The data deletion page has every option, including how to revoke access from each platform's side.

Questions about your data?

support@horrac.com