Privacy Policy

When you scan a username, we process the public profile information and public relationship lists (followers, following) of that account, fetched on demand from an upstream public-data provider. Results are cached and shared across visitors for the same username — that cache is the product: unfollow detection requires comparing snapshots over time.

We store: the normalized username, public profile metadata (follower/following counts, verification state), and timestamped snapshots of public relationship lists with their coverage metrics. Retention is bounded — only the most recent twenty snapshots per account and list type are kept; older snapshots roll off automatically.

We do not collect Instagram credentials of any kind — the site has no Instagram login and cannot act on your behalf. We do not process private accounts, direct messages, stories, or any content that is not visible to a logged-out visitor. We do not build advertising profiles and run no third-party analytics trackers by default.

Functional storage is limited to what the interface needs: a locale cookie remembering your language choice and a local theme preference (light/dark), both set in your own browser and never sent anywhere.

If you are an account owner: all data we process about a public account is already public to every visitor. Making your Instagram account private immediately removes it from any further scanning, and existing snapshots age out with the retention limit above. You may also request early removal of stored snapshots for a username via our contact channel (GitHub Issues).

Rate limiting and abuse protection may temporarily log an IP hash with a timestamp; these records are ephemeral, exist only to enforce fair-use limits, and are not associated with scanned usernames.