Privacy Policy
How InstagramFetch handles data, maintains anonymity, and protects your media extraction privacy across all studio services.
Zero Credential Storage
We never ask for or store Instagram passwords, usernames, or session tokens. Everything operates without authentication.
Zero auth vectors
No Accounts or Database
Direct client-to-CDN parsing with zero tracking databases or analytics cookies. We maintain no user profile records.
Stateless processing
100% Anonymous Parsing
All public media requests are fetched statelessly through edge servers. Profiles never see who resolved their content.
Edge obfuscated
Introduction & Philosophy
“InstagramFetch is a public-media helper. We do not ask for Instagram passwords and we do not want them.”
Our operational charter centers on friction-free creative reference extraction. We believe creators, designers, and editors need legitimate ways to inspect publicly distributed photographic sequences, multi-frame carousel decks, and vertical video files without undergoing aggressive surveillance or surrender of credentials.
We do not sell personal data, license user behavior metrics to advertising brokers, or execute cross-site canvas fingerprinting. Your session begins and concludes entirely within your individual active browser window.
What We Collect in This Scaffold / Application
State & User Accounts
This MVP has no database and no user accounts. The tool sends only the Instagram URL you paste to POST /api/resolve.
Account Keys & Session Tokens
We do not collect Instagram usernames, passwords, cookies, session tokens, or two-factor codes.
Production Telemetry Constraints
Server logs in a production deploy retain only the absolute minimum required to debug INVALID_URL and UPSTREAM_ERROR responses.
Any ephemeral trace kept in edge cache memory expires immediately following HTTP response delivery to your browser. No durable logs identify which user requested specific public media reels.
What We NEVER Collect (Absolute Zero-Access Guarantee)
To eradicate security liabilities for both our team and our users, the system enforces non-negotiable architectural boundaries:
Instagram credentials or recovery emails.
Zero prompts will ever ask for credentials or account recovery tokens.
Access to private accounts, close-friends lists, or Direct Messages (DMs).
The parser rejects private handles and does not bypass Meta permission boundaries.
Payment data — this platform has no checkout or payment processing.
Free utility with no credit card gateways, subscriptions, or billing details.
Personal identification, browsing histories, or fingerprinting identifiers.
No tracking hardware profiles, battery status polling, or persistent device fingerprints.
Third Parties & CDN Infrastructure
A production host (for example Vercel/Cloudflare) processes HTTP requests under that host’s operational privacy policy.
Live resolve fetches public Instagram HTML and allowlisted CDN bytes. InstagramFetch strictly refuses private-account flows and never stores Instagram cookies or tokens.
When a public media item is queried, our edge nodes inspect the public OpenGraph meta structures or direct content distribution addresses provided on public web feeds. Data transfer follows automated transport security (TLS 1.3) protocols.
Ephemeral Media & Download Cache
InstagramFetch functions strictly as an in-memory streamer and parser. Downloaded video streams (.mp4) and photographic archives (.jpg, .webp) are never mirrored, indexed, or stored permanently on our storage disks.
Direct Pipe-Through
Bytes route from public CDN clusters straight into your device memory via standard browser file download buffers.
Immediate Eviction
Once the file stream handoff to your browser terminates, zero artifacts remain on our runtime environments.
Children's Privacy & GDPR / CCPA Compliance
Because InstagramFetch collects no personally identifiable information (PII), compliance with major privacy regulations — including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) — is straightforward. There is no personal dossier to export, modify, or delete.
Our services are not targeted at or marketed to children under 13 years of age. We do not knowingly process personal data from minors. If you believe any child data has been inadvertently routed, please reach out immediately.
Questions & Contact Information
If you have inquiries regarding our technical privacy guarantees or architecture policies, reach out directly to our dedicated privacy desk.
Privacy & Compliance Team
privacy@instagramfetch.app