TikTok lists five categories of user data that a valid request can cover
Section 2 says TikTok may hold the user data listed under five headings: subscriber information, log-in and log-out data, interaction data (non-content), content data and transaction data. These are the categories that can be the subject of a valid law enforcement request. "May hold" does not mean TikTok holds every item for every user, and being listed does not mean it will be disclosed: each request must still meet the legal requirements for the data asked for.
Details
Who
TikTok
What it covers
Subscriber, log-in/log-out, interaction, content and transaction data
Condition
Valid law enforcement request
Supporting quotations
TikTok may hold the following user data, which can be the subject of a valid law enforcement request:
Subscriber information
Log-in / log-out data
Interaction data (non-content)
Content data
Transaction data
Qualifications & exceptions
Only data that TikTok "may hold" and that is the subject of a "valid" request.
Disclosure depends on the request meeting the applicable legal requirements.
Not stated here
The document does not say whether the list is exhaustive.
Data Access & Collection · Company practice
Subscriber information includes username, contact details, sign-up IP and device information
Under subscriber information TikTok lists the TikTok username, email address, phone number, account creation date, the IP address at account creation and device information. Email address and phone number are listed "depending on user's sign-up method", so they exist only for accounts that signed up that way.
Details
Who
TikTok
What it covers
Username, email, phone, account creation date, sign-up IP, device information
Condition
Email and phone depend on sign-up method
Supporting quotations
TikTok username
Email address (depending on user’s sign-up method)
Phone number (depending on user’s sign-up method)
Account creation date
IP address at account creation
Device information
Qualifications & exceptions
Email address and phone number depend on the user's sign-up method.
Not stated here
What "Device information" covers is not defined.
Data Access & Collection · Company practice
Log-in IP addresses, interaction IP logs and video creation times are listed
TikTok lists the IP address of account log-ins and log-outs as one category, and under interaction data (non-content) it lists IP address logs for interactions "for a specified period only" and the time and date a video was created. The period for the interaction IP logs is not given.
Details
What it covers
IP addresses of log-ins/log-outs
What it covers
IP address logs for interactions
When
For a specified period only
What it covers
Video creation time/date
Supporting quotations
IP address of account log-ins/log-outs
IP address logs for interactions (for a specified period only)
Video creation time/date
Qualifications & exceptions
Interaction IP logs are available only "for a specified period".
Not stated here
The length of the specified period is not stated.
What counts as an "interaction" is not defined.
Whether log-in and log-out IP data are limited to a period is not stated.