TikTok Privacy, Locked Down Step by Step

Before you start: what TikTok actually knows

Most people assume TikTok's privacy risk is about what they post. It isn't, really. TikTok's data advantage comes from observation: how long you pause on a video, which clips you replay, what you skip in the first two seconds, and the pattern that emerges from thousands of those micro-decisions. That behavioural signal is far richer than anything you'd type into a profile field.

If you want the broader picture of what social platforms collect and why, that piece is worth reading alongside this one. Here, though, we're staying practical. Settings open, ten minutes, working through it section by section.

One caveat before anything else: TikTok moves its menus with some regularity. The paths below were accurate at the time of writing, but if a menu isn't where we say it is, look in Settings and Privacy, then Privacy, and you'll almost always find it within one or two taps of that. Nothing has been hidden, just reorganised.

The ten-minute version: five settings that do most of the work

If you only have a short window, these five changes cover the majority of the exposure. The rest of this piece fills in the gaps, but start here.

• Set your account to Private (Settings and Privacy, then Privacy, then Private Account).
• Turn off Suggest your account to others, all three toggles (Settings and Privacy, then Privacy, then Suggest your account to others).
• Switch off contact syncing and delete any previously uploaded contacts (Settings and Privacy, then Privacy, then Sync contacts and Facebook friends).
• Set ad personalisation to off for both interest-based ads and ads based on your activity on other platforms (Settings and Privacy, then Privacy, then Ads).
• Turn off Activity status so others can't see when you're online (Settings and Privacy, then Privacy, then Activity status).

Done those? Good. The sections below explain what each change actually does, what you give up, and what else is worth adjusting.

Private account on TikTok: what actually changes

Going private on TikTok is a bigger shift than the same choice on Instagram or Twitter. On those platforms, a private account mostly just gates who can follow you. On TikTok, it also removes your videos from the For You feed of anyone who doesn't already follow you. That's significant because the For You feed is how most accounts grow. If you go private, you're effectively stepping off the discovery engine entirely.

That's not necessarily a problem. If you use TikTok mainly to watch rather than build an audience, private mode costs you almost nothing. If you're a creator who relies on reach, though, it's a real trade-off and one worth sitting with before you toggle it.

What private mode does concretely: only approved followers can see your videos, your liked videos list, and your following and follower lists. Your profile photo and username remain visible in search, so people can still find and request to follow you. Your comments on other people's public videos remain visible to anyone, regardless of your account status. Private mode is not invisibility.

To set it: Settings and Privacy, then Privacy, then toggle Private Account on.

Separately from account privacy, you can control who sees your liked videos even within your follower group. Settings and Privacy, then Privacy, then Likes. Set this to Only me if you'd rather keep your taste private from followers. It's a small but sensible step.

Takeaway: Go private if you're primarily a viewer. If you're a creator, decide whether the reach trade-off is worth it. Either way, set your liked videos to Only me.

Being findable: suggestions, contact syncing and clearing old uploads

TikTok has several mechanisms for surfacing your account to people who might know you. Some of them are on by default, and a couple carry a data risk that's easy to miss.

Suggest your account to others

Under Settings and Privacy, then Privacy, then Suggest your account to others, you'll find toggles that control whether TikTok recommends your account to people who have your phone number saved, to people you may know, and to users who've connected their Facebook accounts. All three are typically on by default. Turning them off means TikTok stops using your account as a suggestion data point for others, and stops using others' data to surface your account to you.

This matters more than it might seem. Even if your account is private, being suggested to someone is a signal that you exist on the platform. For most people that's fine. For anyone who'd prefer not to be found by specific people, it's worth switching off.

Contact syncing

This is the one that catches people out. If you've ever tapped through a prompt asking whether TikTok can access your contacts, and said yes, TikTok has uploaded your phone's contact list to its servers. That data sits there and is used to build connections between you and people in your contacts who are also on TikTok.

The less obvious part: your contacts didn't consent to being uploaded. Their phone numbers are now on TikTok's servers because you had them saved. This is a common pattern across social apps, and the ICO's guidance on legitimate interests has increasingly scrutinised exactly this kind of third-party data collection.

To stop future syncing and delete what's already been uploaded: Settings and Privacy, then Privacy, then Sync contacts and Facebook friends. Turn off both toggles, then tap Remove synced contacts. Do the same for Facebook friends if you've connected that account. The removal option is easy to miss because it sits below the toggle rather than appearing automatically when you switch it off.

Takeaway: Go to Sync contacts and Facebook friends, turn both toggles off, and tap Remove synced contacts. That's a concrete action on behalf of people in your phone book, not just yourself.

Videos, likes, comments, duets and downloads: the broadcast controls

TikTok's social features are designed for sharing and remixing. That's the point of the platform. But each feature is also a setting you can dial back, and the defaults lean towards openness.

Who can comment

Settings and Privacy, then Privacy, then Comments. Options are Everyone, Friends, or No one. For most people, Friends is a reasonable middle ground. It keeps conversation possible without opening every video to the full internet. If you have a public account and receive unwanted attention, No one is always available.

Duets and Stitches

Duet lets another user record a video alongside yours. Stitch lets them clip a segment of your video into theirs. Both are on for Everyone by default on public accounts. If you'd rather your videos not appear in other people's content without explicit permission, set both to Friends or No one. Settings and Privacy, then Privacy, then Duet and Stitch respectively.

Worth noting: if your account is already private, Duets and Stitches are automatically restricted to your followers. But if you ever switch back to public, those settings revert to their previous state, so it's worth setting them explicitly regardless.

Downloads

TikTok allows other users to download your videos by default. Settings and Privacy, then Privacy, then Downloads. Turn this off if you'd prefer your content stays on the platform. This doesn't affect TikTok's own storage of your videos, only other users' ability to save them locally.

Likes visibility

Already mentioned above, but worth repeating here in context: Settings and Privacy, then Privacy, then Likes. Set to Only me. Your liked videos are a surprisingly detailed map of your interests and, in some cases, your beliefs or identity. There's no good reason to leave that visible to followers by default.

Takeaway: Set Comments to Friends, Duet and Stitch to Friends or No one, and Downloads to off. Then set Likes to Only me if you haven't already.

Messages and activity status

Direct messages

TikTok's direct messaging defaults vary by account age and region, but in general, public accounts can receive messages from anyone. Settings and Privacy, then Privacy, then Direct messages. Set this to Friends (meaning mutual followers) or No one. There's very little reason to accept messages from strangers unless you're actively using TikTok for public-facing work.

If you're under 18, TikTok restricts messaging more tightly by default, but the setting is still worth checking manually because defaults can shift with app updates.

Activity status

Activity status shows your followers and people you message whether you're currently active on the app. It's off by default for some users and on for others, depending on when you created your account. Settings and Privacy, then Privacy, then Activity status. Switch it off. This is a low-cost change: you lose nothing meaningful, and you stop broadcasting your usage patterns to other people.

Takeaway: Set Direct messages to Friends and turn Activity status off. Both take under a minute and have no real downside.

Ads and inference: the interest file and turning personalisation down

TikTok's advertising system works in two main ways. First, it uses the behaviour it observes on the app itself: what you watch, what you engage with, what you search for. Second, it uses data from third parties, including data brokers and the tracking pixels that advertisers embed on external websites and apps. That second category is the one most people don't expect.

TikTok's picture of you is built less from what you post and more from what you watch. The inference file that results is often more revealing than anything you'd consciously share.

The mechanics of how that cross-platform tracking works are worth understanding if you want the full picture. For now, the practical controls are in Settings and Privacy, then Privacy, then Ads.

You'll find two main toggles. One controls whether TikTok personalises ads based on your in-app activity. The other controls whether it uses off-platform data, meaning data from advertisers and data brokers, to target you. Turn both off.

What this doesn't do: it doesn't stop TikTok from collecting behavioural data. It doesn't stop you seeing ads. It means the ads you see are less precisely targeted, which is a modest privacy gain rather than a complete solution. TikTok still builds its inference model; it just uses it less directly for ad targeting when you opt out.

You can also see TikTok's inferred interest categories for your account. Settings and Privacy, then Privacy, then Ads, then Ad interests. The list there is TikTok's working model of who you are as a consumer. It's often accurate in ways that feel slightly uncomfortable, because it's built from observation rather than anything you've explicitly declared.

You can remove individual interest categories from that list. It won't delete the underlying behavioural data, but it does adjust the targeting model. Think of it as trimming the profile rather than deleting it.

Takeaway: Go to Ads in your Privacy settings, turn off both personalisation toggles, and spend a moment looking at your Ad interests list. Remove anything that feels wrong or that you'd rather not have associated with your account.

Your data file: requesting the download and reading the inferences

Under UK GDPR, you have the right to request a copy of the data TikTok holds about you. TikTok provides this through a built-in tool: Settings and Privacy, then Privacy, then Download your data. You can request either a text file (JSON format, readable with any text editor) or an HTML file that's easier to browse without technical knowledge. The HTML version is the better choice for most people.

TikTok is required to provide this within 30 days under the ICO's guidance on subject access requests. In practice, TikTok typically delivers it faster than that, often within a few days.

What you'll find in the file varies, but typically includes your watch history (every video you've played, with timestamps), your search history, your comment history, your direct message history, your liked videos, your profile information, and, most interestingly, the inferred interest categories that underpin your ad profile. The watch history in particular can be a revealing document. It's a timestamped log of your attention over months or years.

The value of downloading this file isn't just curiosity. It's a concrete way to understand what TikTok has accumulated, which makes the privacy settings in this piece feel less abstract. When you can see the actual inference file, the ad interest toggles stop feeling like bureaucratic checkboxes and start feeling like they matter.

If you want to exercise further rights, including the right to have certain data deleted, the TikTok privacy policy for the EEA and UK sets out the process. The ICO's Your data matters pages explain your rights in plain English and include guidance on what to do if a platform doesn't respond properly to your request.

Takeaway: Request your data download now, choose the HTML format, and when it arrives, open the watch history and the ad interests sections first. It takes five minutes to request and is genuinely informative.

Everyday hygiene: watch history and the re-check rhythm

Clearing your watch history

TikTok lets you clear your watch history, though it's tucked away. Settings and Privacy, then Privacy, then Clear watch history. This removes the record from your account's visible history, though TikTok's own data retention practices mean the underlying signal may persist in their systems for longer. Think of clearing watch history as tidying your profile rather than wiping a hard drive.

More useful on a day-to-day basis is the Not Interested feedback loop. When you long-press on any video in your For You feed, you get options including Not interested. Using this regularly does two things: it adjusts what TikTok serves you, and it creates a small friction against the algorithm's tendency to serve increasingly niche content once it thinks it knows your tastes. It's a minor act of algorithmic hygiene, but it adds up.

The re-check rhythm

TikTok updates its app and its settings menus more frequently than most platforms. New features arrive with new default settings, and those defaults almost always favour openness over privacy. A setting you turned off six months ago might have a new companion toggle that appeared in the last update, sitting at its default of on.

A quarterly check takes about ten minutes. The areas most likely to have changed are the Suggest your account to others section, the Ads settings, and anything under the Safety tab, which occasionally gets new features added. The TikTok UK newsroom announces major feature changes, and it's worth a quick scan when you do your quarterly review.

It's also worth revisiting your connected apps. Settings and Privacy, then Privacy, then Connected apps shows any third-party services you've granted TikTok access to, or that you've logged into using TikTok credentials. Revoke any you no longer use. Each connected app is a potential additional data pathway.

A note on network-level tracking

The settings in this piece address what TikTok exposes about you to other users and how it uses your data for advertising. They don't address what TikTok's app observes at the network level, including device identifiers and IP addresses, which are collected regardless of your in-app settings. A VPN (a virtual private network, a category of tool that routes your traffic through a third-party server and masks your IP address) can obscure your IP from TikTok, but it introduces its own trust questions because your traffic is then visible to the VPN provider instead. It's a trade-off, not a straightforward improvement, and it's worth understanding before choosing that route.

Takeaway: Set a calendar reminder for three months from now labelled TikTok privacy check. When it fires, go through the Privacy menu from top to bottom, looking for anything new. It's a small habit that keeps you ahead of the defaults.