Privacy Policy

We follow a privacy-by-design approach: we only collect the data we genuinely need to run the service, we store as little as possible, and we delete old data automatically.

1. What we collect and why

Data	Why we need it	How long we keep it
The Instagram link you paste	To fetch the video you asked for. It is not stored as personal data.	Kept in download logs for a limited period (see below)
Your IP address	Security (rate limiting, abuse protection) and analytics (country statistics).	Public IP addresses are stored as one-way salted hashes — we can never recover the original address from the hash. Logs are purged automatically.
Approximate country	Anonymous usage statistics (e.g. which countries use the service).	Purged with the download logs.
Browser type (user agent)	Debugging and service operation.	Purged with the download logs.
Error messages & page URL	Diagnosing and fixing failures so the service keeps working.	Error logs are purged automatically.
Contact form: name, email, message	To reply to your message.	Purged automatically after a set period.
DMCA notices: name, email, URLs	To process legitimate copyright takedown requests.	Purged automatically after a set period.

2. IP address hashing

We never keep raw public IP addresses in our analytics or log tables. Instead, each public IP is passed through a one-way salted hash before it is stored. This gives us aggregate statistics (unique visitors, rate limiting) without us being able to identify a specific person. The hash is a one-way function: the original address cannot be recovered from it.

3. What we never do

• We never ask for, receive or store your Instagram username or password.
• We never store, copy or re-upload the videos you download — the file is streamed directly to your device.
• We never sell, rent or share your personal information with third parties.
• We do not use tracking cookies or advertising profiles.

4. Third parties

When you use the contact or DMCA forms, the message is delivered by email. For country statistics we may query a public geo-IP service (ip-api.com) which receives the address for a fraction of a second and never sees the result of our hash. Our hosting provider keeps standard server access logs for security, as is normal for any website.

5. Retention & deletion

Old records are deleted automatically on a rolling schedule: download analytics, error logs and the geo cache are kept only as long as needed (tens of days), contact messages and reports for a few months. Failed-login and block/allow records are kept only as long as they are useful for security. You can ask us to delete data about you at any time — see section 7.

6. Children's privacy

The service is not directed at children under 13, and we do not knowingly collect personal information from children.

7. Your rights

You may contact us at any time to ask what data we hold and request its deletion. Because IP addresses are hashed, most data is not tied to you personally and is deleted automatically.

8. Contact

Questions about this policy? Contact us at nkuamr519@gmail.com.