1. Information We Access and Collect
When you link your Meta Threads account to this application, we request access to your public Threads profile and publishing permissions (threads_basic and threads_content_publish).
We store your Threads User ID, Threads handle, cached profile picture URL, and an encrypted OAuth access token.
2. How Your Data Is Secured
All access tokens are encrypted using authenticated AES-256-GCM encryption with keys securely managed outside the database in Cloudflare Worker Secrets. Plaintext access tokens are never logged, exposed to client-side code, or shared with third parties.
3. Your Deletion Rights
You have absolute control over your data. You may disconnect your Threads account at any time using the in-app "Disconnect and delete Threads data" button, which permanently erases your tokens, profile data, and post publishing history from our systems.