www.tiktok.com
“Log in | TikTok”
Tech check
What the site says about itself, next to what its public page actually loads. Facts only, no verdict: you decide.
The page doesn't make tech claims we check for (AI, on-chain, wallets, trading, own chain, staking, live data, an app).
What it is
- The site describes itself as: “Log in or sign up for an account on TikTok. Start watching to discover real people and real videos that will make your day.”E2
- It's built with React (common tools for building web apps).E38
- In your browser it installs a background script (offline use, push messages), stores data in your browser's built-in database and saves small bits of data in your browser.E40E41E42
- It has sections such as /us, /explore, /following, /shortdrama, /live and /tiktokstudio.E123
- While loading, it called 40 endpoints on its own servers, such as /service/2/abtest_config/, /v1/list, /video/tos/useast2a/tos-useast2a-ve-0068-euttp/o4LLgIDJgfjMtUEdfegVPR5yVzmLbGcIpAIgAG/ and 33 more.E45E46E47E48
Where your data goes
Sign-in & accountsLog you in or manage accounts. 1
| accounts.google.com | Google Sign-In: log in with Google | 2×E20 |
Not identifiedServices we don't have in our list yet. 6
| lf16-tiktok-web.tiktokcdn-us.com | not identified | 246×E6 |
| lf16-cdn-tos.tiktokcdn-us.com | not identified | 7×E8 |
| lf16-tiktok-common.tiktokcdn-us.com | not identified | 7×E17 |
| sf16-website-login.neutral.ttwstatic.com | not identified | 6×E14 |
| p16-common-sign.tiktokcdn-us.com | not identified | 2×E7 |
| www.tt.site | not identified | 1×E4 |
How key features work
Sign-in and accounts
Sign-in and account features show up in its code or traffic (/v1/user/webid, /check_and_get_text/2e1fcc60aeaa11e99ef535aeebd27c9b/normal/account_server, /module_meta/common-login/vmok-manifest.json and accounts.google.com).E48E52E69E20E39
/v1/user/webid/check_and_get_text/2e1fcc60aeaa11e99ef535aeebd27c9b/normal/account_server/module_meta/common-login/vmok-manifest.jsonaccounts.google.comLoading its content
Its content loads from its own API while you browse (/service/2/abtest_config/, /v1/list, /video/tos/useast2a/tos-useast2a-ve-0068-euttp/o4LLgIDJgfjMtUEdfegVPR5yVzmLbGcIpAIgAG/, /v1/user/webid and 2 more).E45E46E47E48E49
/service/2/abtest_config//v1/list/video/tos/useast2a/tos-useast2a-ve-0068-euttp/o4LLgIDJgfjMtUEdfegVPR5yVzmLbGcIpAIgAG//v1/user/webid/monitor_web/settings/browser-settings/tiktok/popup/dispatch/v1Drawing and editing in the browser
The page draws and edits graphics in your browser using the canvas.E44
canvasCookies and storage
Names only. We never store the values.
| Cookie | Set for | Kept | Whose |
|---|---|---|---|
| tt_csrf_tokenE25 | tiktok.com | until you close the browser | the site |
| tt_chain_tokenE26 | tiktok.com | about 180 days | the site |
| tiktok_webapp_theme_sourceE27 | www.tiktok.com | about 300 days | the site |
| tiktok_webapp_themeE28 | www.tiktok.com | about 300 days | the site |
| msTokenE29 | www.tiktok.com | about 90 days | the site |
| delay_guest_mode_vidE30 | www.tiktok.com | about 300 days | the site |
| msTokenE31 | tiktokw.us | about 10 days | the site |
| ttwidE32 | tiktok.com | about 365 days | the site |
| g_stateE33 | www.tiktok.com | about 180 days | the site |
| msTokenE34 | tiktok.com | about 10 days | the site |
localStorageE35: SLARDARtiktok_webapp_vmok, SLARDARwebmssdk, text.5dc26cf008d511e9b571e1bc0c9e23b5.WebApp_Login.en, __tea_cache_tokens_548444, ARGUS_XSS_V3, ppf_eligibility_v2, version.2e1fcc60aeaa11e99ef535aeebd27c9b.account_server.en, LOCAL_IS_EFFECTIVE, __tea_cache_tokens_1992, g_exp, STM_TAB_ID_KEY, SLARDARpns_communication_service, f_s_1, __tea_cache_first_1992, pc_app_auto_tip, PUMBAA_FREQ, __tea_cache_first_548444, __tea_cache_first_345918, msToken, security-sdk/s_sdk_crypt_sdk
sessionStorageE36: __tea_session_id_345918, __tea_session_id_1992, webapp-session-referer, webapp_fyp_feeder_landing, __tea_session_id_548444, __tea_session_id_1988, webapp_extra_data, webapp_tiktok_privious, webapp_tiktok_open, STM_TAB_ID_KEY, webapp_launch_mode, webapp_session_id, user_session, webapp_original_traffic_type, msToken
IndexedDBE37: live-recs-db, secure-store, sync-sdk-db
Pages and API calls
Pages it links to
//us/explore/following/shortdrama/live/tiktokstudio/@/@lilouzzz1/tag/music/legal/signupEndpoints
Called while loading (seen) or named in the code (code).
| libraweb.tiktokw.us/service/2/abtest_config/ | seenE45 |
| mcs.tiktokw.us/v1/list | seenE46 |
| v16-webapp-prime.us.tiktok.com/video/tos/useast2a/tos-useast2a-ve-0068-euttp/o4LLgIDJgfjMtUEdfegVPR5yVzmLbGcIpAIgAG/ | seenE47 |
| mcs.tiktokv.us/v1/user/webid | seenE48 |
| mon16-normal-useast5.tiktokv.us/monitor_web/settings/browser-settings | seenE49 |
| www.tiktok.com/tiktok/popup/dispatch/v1 | seenE50 |
| mcs.tiktokv.us/v1/list | seenE51 |
| mcs.tiktokw.us/v1/user/webid | seenE52 |
| www.tiktok.com/tiktok/pns/privacy_headers | seenE53 |
| www.tiktok.com/tiktok/ppf/api/eligibility/v2 | seenE54 |
| www.tiktok.com/api/related/item_list/ | seenE55 |
| webcast.us.tiktok.com/webcast/wallet_api_tiktok/recharge/check_external_entry | seenE56 |
| www.tiktok.com/api/feedback/v1/newest_reply/ | seenE57 |
| www.tiktokw.us/api/global-footer/graphql | seenE58 |
| www.tiktok.com/api/ba/business/suite/permission/list/ | seenE59 |
| www.tiktok.com/aweme/v1/report/inbox/notice | seenE60 |
| www.tiktok.com/api/v1/web-cookie-privacy/config | seenE61 |
| www.tiktok.com/aweme/v1/report/inbox/notice/ | seenE62 |
| mon16-normal-useast5.tiktokv.us/monitor_browser/collect/batch/ | seenE63 |
| www.tiktok.com/api/ad/tiktok_web/banner/v1/ | seenE64 |
| www.tiktok.com/api/customtdk/item/ | seenE65 |
| www.tiktok.com/api/shop/brandy_desktop/tiktok-ug/get_compaign_banner | seenE66 |
| www.tiktok.com/api/seo/keyword/item_tags/ | seenE67 |
| mssdk.tiktokw.us/web/resource | seenE68 |
| starling.tiktokv.us/check_and_get_text/2e1fcc60aeaa11e99ef535aeebd27c9b/normal/account_server | seenE69 |
| www.tiktok.com/tiktok/v1/screen_time/list/ | seenE70 |
| www.tiktok.com/api/share/settings/ | seenE71 |
| www.tiktok.com/tiktok/v1/app_open_times/upload/ | seenE72 |
| www.tiktok.com/tiktok/v1/community_notes/intake/check | seenE73 |
| www.tiktok.com/module_meta/common-login/vmok-manifest.json | seenE74 |
Evidence
Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.
Limits
- We only see what your browser sees: code and requests on a first visit, without logging in or accepting cookie banners. What the servers do with data is invisible from outside.
- Site code is usually minified (compressed), so names are partly lost and some code may be only partly analysed.
- Some trackers only load after you accept cookies or log in, so the real list can be longer.
- We visited from a server in the United States. Sites load different trackers and cookie banners in different countries (visitors in the EU usually get a consent banner first).
- This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.
Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id 3PL0iRxP.