Docs    TikTok

TikTok Feed GDPR Compliance

How the TikTok Feeds plugin handles GDPR, what data is transferred and stored, and where the GDPR setting lives.

Would you like to show your TikTok feed in a way that respects your visitors’ privacy under the GDPR?

You can use the GDPR setting in TikTok Feeds to choose what your feed shows visitors before they give consent.

This guide covers how the GDPR setting works, what changes in your feed before visitors give consent, and which consent plugins it works with.

Before you get started, make sure TikTok Feeds is installed and activated on your site.

Note: For details on how our plugins transfer and store data, see our GDPR disclosure.

Choosing a GDPR Option

To get started, we’ll open the GDPR setting.

From your WordPress admin sidebar, go to TikTok Feeds » Settings. Then, click the Feeds tab.

The TikTok Feeds Settings page with an arrow pointing to the Feeds tab

The GDPR setting on this tab has 3 options. Automatic is the default. With it, the plugin detects a supported consent plugin on its own. If your site already uses one, you can leave the setting as it is.

OptionWhat your visitors see
AutomaticIf a supported consent plugin is active, each visitor sees the limited version of the feed until they give consent. If none is active, every visitor sees the full feed, the same as with No.
YesEvery visitor sees the limited version of the feed. A visitor who accepts cookies in a consent plugin that the setting works with then sees the full feed.
NoEvery visitor sees the full feed. Images and videos can load directly from TikTok.

To change it, choose an option from the GDPR list. For example, choose Yes to show the limited version of the feed to every visitor.

The GDPR setting on the Feeds tab with Yes chosen and an arrow pointing to the list

Then, click Save Changes.

The top of the Feeds tab with an arrow pointing to the Save Changes button

Your GDPR setting is now saved. Next, let’s look at what changes in your feed before a visitor gives consent.

Before a visitor gives consent, your feed shows the limited version. Here’s how that changes your feed:

  • Only images saved on your site show in the feed. Until a copy of an image is available, a placeholder image shows in its place.
  • The profile picture in the feed header shows from a copy saved on your site, or a placeholder if there is no copy yet.
  • Videos don’t play. Instead, visitors click a link to view the video on TikTok.

For example, here’s a feed on a site that uses our free consent plugin, WPConsent. The visitor hasn’t chosen anything in the banner yet. As a result, the feed is limited.

A TikTok feed on a front-end page with the WPConsent banner at the bottom, before the visitor chooses an option

The thumbnails in this feed look the same as they will after consent. That’s because copies of the images are already saved on the site.

The difference shows when a visitor clicks a video. Before consent, the lightbox opens with a link to view the video on TikTok instead of a player.

The lightbox before consent, with a link to view the video on TikTok and no video player

Once the visitor clicks Accept All in the WPConsent banner, they see the full version of the feed. Clicking the same video now opens it in the lightbox player.

The lightbox after consent, playing the video

Swipe View behaves a little differently. Let’s look at it next.

If you chose Swipe as your video player experience, Swipe View only turns on once the visitor has given consent. Before that, clicking a video opens the lightbox with the link to TikTok. After consent, the same click opens Swipe View.

Swipe View open on a video after the visitor accepted cookies

To learn more about Swipe View, see our guide on viewing TikTok videos in Swipe View.

Next, let’s look at the consent plugins the GDPR setting detects.

When the GDPR setting is on Automatic, the plugin detects these consent plugins.

Consent pluginName shown in the GDPR setting
WPConsentWPConsent
Real Cookie BannerReal Cookie Banner
Cookie Notice & Compliance for GDPR / CCPACookie Notice & Compliance for GDPR / CCPA
CookieYesCookieYes – Cookie Banner for Cookie Consent
CookiebotCookiebot
ComplianzComplianz
Borlabs CookieBorlabs Cookie
GDPR Cookie ComplianceGDPR Cookie Compliance by Moove

When one of these plugins is active, its name shows with a green check below the GDPR list on the Feeds tab. This lets you confirm the setting detected it.

The GDPR setting on Automatic with an arrow pointing to the detected consent plugin, WPConsent

Each visitor then sees the limited version of the feed until they accept cookies in that plugin’s banner. After they accept, they see the full feed.

If you use a consent plugin that isn’t in the table, the next section shows what to do.

If your consent plugin isn’t in the table above, set the GDPR setting to Yes. Every visitor then sees the limited version of the feed.

On Automatic, the plugin doesn’t detect your consent plugin. In that case, every visitor sees the full feed.

The feed only recognizes a visitor’s consent in the plugins from the table above. With a plugin that isn’t in the table, visitors keep the limited version of the feed even after they accept cookies.

Last, let’s look at what the limited version of your feed needs from your server.

Local Images and Your Server

The limited version of your feed relies on copies of your images saved on your own site. Here’s what that needs from your server:

  • The plugin saves the copies in a sb-tiktok-feeds-images folder inside your WordPress uploads folder. It creates the folder when you activate the plugin.
  • Your server needs an image library that WordPress can use to resize images, either Imagick or GD.
  • The Optimize Images setting on the Advanced tab must be on. It’s on by default. When it’s off, the plugin doesn’t save copies of your images. Without those copies, the limited version shows placeholders.

The plugin makes the copies after it fetches new videos. On a new feed, they may take a short while to appear. Until then, the placeholder images show.

That’s it! You’ve chosen how your TikTok feed handles visitor consent. You also know what visitors see before and after they give consent.

Next, see our TikTok Feeds settings reference for every other setting in the plugin.

Frequently Asked Questions

Below, we’ve answered some of the most common questions about the GDPR setting.

Is the GDPR setting in the free version?

Yes. The free version has the same GDPR setting on its Feeds tab.

Why do images still load from TikTok when the setting is on Automatic?

This happens when no supported consent plugin is active. The text below the GDPR list then says that no GDPR consent plugin was detected. Every visitor then sees the full feed. To show the limited version to every visitor, choose Yes instead.

Why do my thumbnails look the same before and after consent?

Before consent, the feed shows copies of your images saved on your site. Once those copies exist, the thumbnails match the full version. The difference shows when a visitor clicks a video. See the How Does Your Feed Work Before Consent section above.

support

Couldn’t find your answer in the docs?

Contact Support