Privacy Policy

Last Updated: August 29, 2026 • Effective Date: August 29, 2026

Summary: Instagram Downloader is built with a privacy-first, stateless architecture. We do not maintain a user database, do not track browsing behavior, and do not sell or store personal media. Google Drive access is strictly opt-in and used solely to upload files to a user-selected folder.

1. Overview and Scope

This Privacy Policy explains how Instagram Downloader (“we,” “us,” or “our”) collects, processes, and protects your information when you access and use our website and services at Instagram Downloader.

2. Information We Process

A. Instagram Media URLs

When you use our service, you submit publicly accessible Instagram URLs (e.g., public Reels, video posts, or photos). These URLs are processed temporarily and ephemerally on our server solely to locate and stream the corresponding media file directly to your browser or designated cloud destination. We do not log, catalog, or build profiles around the URLs you submit.

B. Technical & Operational Data

Standard HTTP requests transmit basic technical data such as IP address, browser type, and operating system for routing and abuse prevention. We generate short-lived, anonymous request IDs (e.g., REQ-XXXXXX) to debug intermittent server errors. We do not use third-party analytics trackers, advertising pixels, or behavioral tracking cookies.

3. Google API Services & Google Drive User Data

Instagram Downloader provides an optional Google Drive integration that allows you to automatically save downloaded media directly to your personal Google Drive account.

Google OAuth User Data Policy Compliance:

We request only the minimum necessary Google Drive permissions required for the user-initiated workflow.
We do not store your Google access tokens in a database or local browser storage.
We never transfer, sell, or share your Google user data with third parties.
Your Google user data is not used for advertising, surveillance, or AI model training.

A. Specific Scopes Requested

https://www.googleapis.com/auth/drive.file (Create & Upload): Used strictly to upload media files you have chosen to download directly into the specific folder you select.
https://www.googleapis.com/auth/drive.readonly (Browse Folders): Used solely to list and display folder names within our interactive folder picker so you can choose where files are saved.

B. How Google Tokens Are Handled

When you authorize our application via Google OAuth 2.0:

Your temporary authorization tokens are transmitted securely over HTTPS.
Tokens are encrypted server-side using iron-session in an HttpOnly, Secure, SameSite=Lax session cookie.
Raw tokens are never exposed to frontend JavaScript, query strings, or browser localStorage.
Clicking Disconnect immediately purges all tokens and session state from your session.

4. Data Retention & Storage

We operate without a persistent database (e.g., no SQL, MongoDB, Redis, or Firebase). Downloaded media files are streamed directly from source to destination and are never permanently stored on our servers.

5. Third-Party Services and Links

Our website interacts with external services:

Meta / Instagram: To resolve publicly hosted content requested by the user.
Google LLC: When you voluntarily connect Google Drive for cloud backups.
Vercel Inc.: For secure, serverless hosting and delivery.

Please review the respective privacy policies of Meta and Google for information on how they process data under their independent terms.

6. Children's Privacy

Our services are not targeted towards or intended for use by children under 13 years of age. We do not knowingly collect personal information from children.

7. Changes to This Privacy Policy

We may update this policy periodically to reflect operational, legal, or regulatory updates. Any changes will be posted directly to this page with an updated Effective Date.

8. Contact Information

If you have questions, feedback, or concerns regarding this Privacy Policy or your data, please contact our support team at:

Email: hariompatel33699@gmail.com