Warm Up extension: privacy

Warm Up is a Chrome extension for UGC Flows members. It sits in an Instagram feed on your own account (TikTok too) for a number of minutes you pick, and watches the way a person would. It is part of a UGC Flows plan and does nothing until you connect it to your account.

It also engages with a small number of posts in your niche: it likes them, follows the account, saves the post, and on TikTok reposts one now and then. Each of those has a number you set before the session and a separate daily cap it never goes past, every number can be zero, and turning engaging off on your dashboard turns all of it off on every Chrome. It never comments, and it never sends a message to anybody.

On instagram.com and tiktok.com it reads the page you are on: the videos in the feed, the words around each one (the caption, the hashtags and the account name, which is how it tells a video in your niche from one that is not), and the buttons beside a post: like, follow, save and repost, plus the counts printed next to them.

It reads the handle of the account you are signed in as, off the page's own navigation, so your dashboard can name the account rather than the browser. Nobody types it anywhere.

It does not read your messages, your followers, your password or anything on any other website.

On app.ugcflows.com/tools/warmup it reads one thing: the device token that page hands it when you press connect. That token is stored inside the extension, where no website can read it.

To UGC Flows, and only to UGC Flows: which platform a session ran on, the handle it was signed in as, the keywords you typed for it, when it started and ended, how long it was set for, and what it did: videos watched, how many were in your niche, scrolls, and how many likes, follows, saves and reposts landed. That is what draws the sessions on your dashboard.

It never sends a video, a picture, a direct message, a follower list, a password or a cookie. Nothing goes to anyone but UGC Flows.

It sends nothing at all until you connect it, and nothing after you disconnect it.

The device token and your last session settings, in the extension's own storage. Remove the extension and they go with it. Today's minutes are read back from your dashboard rather than kept here, so the two can never disagree.

No direct messages, no story replies, no reading or writing anything on a site other than Instagram, TikTok and UGC Flows. No passwords, no cookies, no session tokens from Instagram or TikTok. No proxies, no fingerprinting, no remote code, and it never answers a captcha: a challenge or a rate limit ends the session and says so on screen.

It never engages past what you set. There is a limit per session and a limit per day per Chrome for each kind, counted on our side as well as in the extension, and one is only counted when the page itself shows it landed. It never comments.

It does not run when you are not signed in to UGC Flows, and it stops on its own if your plan ends.

Everything the extension sends is tied to your UGC Flows account and covered by the UGC Flows privacy policy at ugcflows.com/privacy. You can disconnect any Chrome from app.ugcflows.com/tools/warmup, which ends its access immediately.

Automating a logged-in account is against Instagram's and TikTok's own terms. You are using this on your own accounts, at your own risk, and the numbers are deliberately small for that reason.

Write to hello@ugcflows.com or say so in the community discord.