Privacy policy
Effective 18 October 2026
Social Gateway (https://social.liebanajr.com) is a private, self-hosted service. Its owner runs it to manage their own social media accounts. There is no public sign-up and no other users.
What it accesses
When the owner connects an account, Social Gateway receives an access token from that network and uses it only for that account:
- X: the account's profile, posts, timelines, mentions, likes, bookmarks, followers, lists and direct messages; it can publish, delete, like, repost, follow, bookmark and send direct messages.
- Instagram (Instagram API with Instagram Login): the professional account's profile, media, comments, insights and messages; it can publish photos, videos, reels, carousels and stories, reply to, hide and delete comments, and send messages.
- TikTok (Login Kit, Content Posting API, Display API): the account's basic profile, statistics and public videos; it can publish videos and photos to the account or send them to the account's drafts.
- YouTube (YouTube Data API and YouTube Analytics API): the channel, its videos, playlists, comments, captions and analytics; it can upload, edit and delete videos, manage playlists and thumbnails, and post, reply to and moderate comments.
How it is used
The data is used only to let the owner publish, schedule and manage their own content and read their own statistics, including through an AI assistant (such as Claude) that the owner explicitly authorises on this site. An assistant can publish, interact or send messages only if the owner turned that on for it, and everything done that way is listed for the owner. Social Gateway does not use the data for advertising, does not sell it, does not share it with third parties, and does not use it to train AI models.
Social Gateway's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. YouTube data is accessed through YouTube API Services; see the YouTube Terms of Service and the Google Privacy Policy.
Storage and sharing
Access tokens are encrypted with AES-256-GCM in a private database on the owner's server. Images and videos uploaded for posts are stored encrypted and deleted within days after they are published. Data read from the networks (posts, comments, statistics) is not stored: it is fetched when the owner asks for it.
Retention and deletion
Removing an account on this site deletes its access token and its post history here immediately; see data deletion. Access can also be revoked at any time in each network's settings: X, Instagram, TikTok (Settings → Security → Manage app permissions) and Google.