Privacy Policy

Adiniculae Promotion · Last updated 7 November 2026

Operator and scope

Adi Niculae operates Adiniculae Promotion at adiniculae.cc, an administrative workspace for the Bear in Motion and Song of the Day music projects. Contact: [email protected]. This policy describes the optional social account integrations, rather than every separate feature of the public blog.

What is collected

After an authorized account administrator consents through Google/YouTube, Meta/Facebook/Instagram or TikTok, we collect the account or channel identifier and display name, identifiers, titles, links, formats and publication dates of available posts, and the aggregate statistics the platform permits: views, followers or subscribers, likes, comments, shares, reach and watch time where available. Missing metrics remain unavailable. We do not retrieve private messages, comment text, individual follower lists, passwords or advertising profiles. OAuth access and refresh tokens are stored encrypted on the server.

Purpose, access and disclosure

Data is used to display performance to authorized administrators and associate posts with music and promotional campaigns. Bear in Motion and Song of the Day have separate project records. OAuth grants can cover several accounts or both projects; revoking such a grant removes the linked imported data across those accounts. Statistics are not displayed publicly. We do not sell API data or use it for advertising targeting.

Cloudflare provides hosting, access authentication and D1 storage. Connecting an account exchanges authorization information directly with the relevant platform. If an administrator explicitly requests AI content generation, non-YouTube aggregate campaign statistics may be included in that request to the configured OpenAI API. OAuth tokens are never sent to AI providers. YouTube API data is excluded from AI-generation context. We do not use social API data to train a model. These optional requests are distinct from periodic statistics updates.

Retention and security

Post metadata is refreshed or removed within 30 days. Observed statistics have a maximum 90-day history while authorization remains valid; failed authorization or a disconnect triggers removal of the affected imported data and credentials. Inactive connections without a successful update for 29 days are removed. Unconfirmed discovered connections expire after one day. Deletion confirmation codes contain no account details and expire after 30 days. Campaigns, original media and editorial drafts are separate records and are not deleted by disconnecting an integration. Cloudflare recovery copies may persist for its limited recovery period; recovered data must be erased again before use.

Administrative access uses Cloudflare Access and necessary session cookies. Social credentials stay on the Worker server and are encrypted in D1; they are not included in frontend responses or source control. Ordinary server requests may be processed by Cloudflare for delivery and security. No additional advertising cookies are introduced by this integration. Service providers may process data outside your country subject to their applicable terms and safeguards.

Your choices and deletion

Connections are optional. In Studio editorial → Promovare, use “Revocă accesul și șterge datele” to remove the imported account data and request revocation at the platform. This does not delete your original posts or account on that platform. If remote revocation cannot be confirmed, the interface tells you to revoke it directly in the platform settings. You may also request access, correction, deletion, restriction or withdrawal by contacting the operator. Verify account ownership without sending passwords or tokens. Verified deletion requests are handled as soon as possible, within seven calendar days. You may contact the competent data protection authority, including Romania’s ANSPDCP, where applicable.

See deletion instructions. Meta and TikTok authenticated revocation callbacks also trigger erasure. Google revocation is detected during periodic authorization checks; you can revoke Google access directly at Google account permissions.

YouTube and platform policies

The application uses YouTube API Services. See the Google Privacy Policy, Meta Privacy Policy, and TikTok Privacy Policy. Provider authorization and data availability are subject to their own settings and policies. Changes to this policy will be dated on this page.

About the integration · Privacy Policy · Terms of Service · Data deletion