Privacy Policy

Last Updated: September 1, 2026

1. Introduction

InstaSave ("we", "our", or "the Service") is dedicated to protecting your privacy. This Privacy Policy clarifies what information is processed when you visit and use our web application.

2. Information We Do NOT Collect

We prioritize zero-knowledge architecture. We do not require account creation, nor do we ever request or store your Instagram passwords, cookies, authorization tokens, or profile credentials.

3. Information Processed Automatically

To ensure system security, prevent denial-of-service abuse, and enforce rate limits, we process:

  • Cryptographically Hashed IP Addresses: We compute a one-way SHA-256 HMAC hash of client IP addresses to enforce rate limits without storing raw identifiable IP data.
  • User-Agent & Browser Headers: Basic browser metadata for layout rendering and compatibility.
  • Requested Media URLs: Public Instagram URLs submitted to our analyzer endpoint.

4. Temporary Media Processing

Downloaded media is transferred through temporary, short-lived buffers. We do not permanently archive, store, or catalogue media files on our storage disks. All temporary files are automatically pruned by our system cron after 30 minutes.

5. Third-Party Advertising & Cookies

We may display third-party advertisements via Google AdSense to fund our free utility. Google and its partners may use cookies to serve ads based on prior visits to this or other websites. You can manage or disable personalized advertising by visiting Google's Ads Settings.

6. Contacting Us

If you have any questions regarding this Privacy Policy, please reach out via our Contact Page.