Klaxon — Privacy Policy

Last updated: 29 August 2026

Klaxon is a self-hosted tool that lets its users publish posts to their own connected social media accounts (such as X, Facebook, Instagram, TikTok and YouTube) from one place. This policy explains what data Klaxon handles.

What we store

• Account details — your username and a securely hashed password (we never store your password in plain text).
• Social connections — the API keys and access tokens for the social accounts you choose to connect. These are encrypted at rest (AES-256-GCM) and are used only to publish content on your behalf when you ask.
• Content you create — the text, templates and media you submit in order to post it to your selected networks.

How your data is used

Your credentials and content are used solely to perform the actions you request — publishing your posts to the networks you connect, via those networks' official APIs. Klaxon does not sell your data, does not use it for advertising, and does not share it with anyone other than the social networks you explicitly post to.

Media handling

Images and videos you attach are held only for as long as it takes to send them to your chosen networks, then deleted. For platforms that require it (e.g. Instagram), a file may be served briefly from a random, unguessable URL so the network can fetch it, and is removed immediately afterwards.

Third-party networks

When you connect and post to a network, your content and the relevant token are sent to that network. Their handling of your data is governed by their own privacy policies (e.g. Google/YouTube, Meta/Facebook & Instagram, X, TikTok).

Data retention & deletion

You can disconnect any social account at any time, which removes its stored credentials. If your account is deleted, its associated data is removed from the database.

Contact

For any questions about this policy or your data, contact the operator of this Klaxon instance via the site it is hosted on.