Privacy policy

Search and profile data

A username you submit is sent to the server to request the selected public profile or media result. We do not ask for an Instagram password, session cookie, or account credentials.

To monitor provider quotas and abuse, the server records each lookup with the searched username (or the code of a pasted post or reel link), the profile section, the result and the time. This record does not contain your IP address and is deleted after 90 days.

To avoid requesting the same public data again, the server stores what our data provider returns for a public account: profile details (name, biography, profile picture link, counts) and story, post, reel and highlight details (captions, dates, counts and links to the media on Instagram's servers). Media files themselves are not stored. Stored details are reused for up to a day and replaced when newer data is fetched; they are kept until removal is requested. To ask for the stored data of an account to be removed, use the contact page.

Data on your device

Your theme preference and your cookie choice are stored in your browser's local storage. You can clear them through browser settings.

After you view profile media, you may optionally rate your experience from 1 to 5. We store the score, a random submission reference and the submission time; no searched username, IP address or Instagram credentials are included in the rating. Your browser remembers a submitted rating in local storage and a one-year cookie so we do not ask again. Skipping the prompt is remembered only for that detail in the current tab; another detail can ask again. You can clear these preferences in browser settings.

Analytics and cookies

We use Google Analytics 4, provided by Google, to understand which pages are visited and how visitors find the site. Analytics cookies (_ga and _ga_*, kept for up to two years) are set only after you choose Accept in the cookie banner. Until then, the Google Analytics script is not loaded and no data is sent to Google.

With your consent, Google receives information such as the pages you open, the referring website, an approximate location derived from your IP address, and your device and browser type. Google processes this data under its own privacy policy. You can change your choice at any time with Cookie settings in the footer; declining removes the analytics cookies.

Technical logs

Hosting and security infrastructure may process standard logs such as IP address, request time, browser type, errors, and performance information for a limited period. These logs support security, debugging, and service delivery.

Contact form

When you submit the contact form, your name, email, subject, message, and submission time are stored in the database so the request can be reviewed. The contact record does not include your IP address or Instagram credentials. Data should be retained only as long as the request and applicable legal duties require.

Remote media and providers

Images and videos may be fetched from remote sources through a secure media gateway. Profile and media queries may be sent to the configured API provider, whose own privacy terms may apply.

Retention and rights

Server-log retention is controlled by the application configuration. Use the contact channel published on the site for requests available under applicable law.