Privacy Policy

Last updated: 30 March 2026

This Privacy Policy explains how InstaDownloader ("we", "us", "our"), a service operated by Instastatistics, collects, uses and protects information when you use https://downloader.instastatistics.com (the "Service"). By using the Service you agree to the practices described here.

1. Information we collect

InstaDownloader is designed to need as little personal information as possible.

• Public Instagram metadata you ask us to fetch. When you paste a public Instagram URL, username or hashtag, our server retrieves the post or profile metadata that Instagram already exposes (shortcode, author username, caption, thumbnail URL, public like and view counts). This metadata is cached so repeated downloads are instant.
• Technical request data. Our edge and origin servers receive standard request fields (IP address, timestamp, user agent, referrer, requested URL) for the duration of the request and short rolling logs used solely for abuse prevention, rate limiting and debugging.
• Cookies and analytics. We use Google Analytics and Google AdSense. These services may set cookies and process pseudonymous identifiers in line with their own privacy policies.

2. What we do not collect

• We do not require an account, email address or password.
• We do not store the video, image or audio bytes you download. Files stream directly from the Instagram CDN through a stateless proxy.
• We do not sell, rent or trade personal information.
• We do not knowingly collect data from children under 13. The Service is not directed to children.

3. How we use information

• To deliver the requested download or preview.
• To prevent abuse, fraud and excessive automated use of the Service.
• To improve site performance and surface trending public content.
• To serve relevant advertising through Google AdSense.

4. Legal bases (GDPR)

For users in the European Economic Area and the United Kingdom we rely on the following lawful bases under the General Data Protection Regulation: legitimate interests (operating, securing and improving the Service), consent (advertising and analytics cookies, where required) and compliance with legal obligations (responding to lawful requests).

5. Cookies and similar technologies

We use a minimal set of essential cookies required for the Service to function, plus optional analytics and advertising cookies set by Google. You can control optional cookies through the consent banner shown on your first visit and through your browser settings. Disabling cookies will not prevent core download functionality.

6. Third party services

The Service relies on the following processors and providers:

• Instagram CDN. Public media URLs we proxy come directly from Meta-operated infrastructure.
• Upstream metadata APIs. Public post metadata is retrieved through partners such as nextcounts.com and proxyapi2.mixerno.space.
• Google AdSense and Google Analytics. Advertising and aggregate traffic measurement.
• Microlink. Generates social-share preview screenshots of our own pages.
• Cloudflare and our hosting provider. Network delivery, caching and DDoS protection.

7. Data retention

• Public post metadata cache: up to 12 months, or until the upstream content disappears.
• Rate-limit and abuse logs: up to 30 days.
• Aggregate analytics: in line with the Google Analytics retention window we configure (typically 14 months).

8. Your rights

Depending on where you live (GDPR for the EEA/UK, CCPA/CPRA for California, LGPD for Brazil and similar frameworks elsewhere) you may have the right to access, correct, delete, port or restrict processing of your personal information, to object to certain processing, and to lodge a complaint with a supervisory authority. To exercise these rights, contact us at privacy@instastatistics.com.

9. International transfers

Our infrastructure operates in the European Union and North America. Where data is transferred outside your jurisdiction we rely on Standard Contractual Clauses or equivalent safeguards.

10. Security

We use TLS for all traffic, isolate caches per shortcode, restrict administrative access through SSH keys, and run automated dependency security scans. No system can be guaranteed 100% secure; you use the Service at your own risk.

11. Removal requests

If you are the owner of an Instagram account and want our cache cleared of references to your content, email privacy@instastatistics.com from an address visible on your Instagram profile or include a verification post. We honour valid takedown requests within 72 hours.

12. Changes

We may update this Policy. Material changes will be highlighted on this page with a new "Last updated" date.

13. Contact

Questions, complaints or rights requests: privacy@instastatistics.com.