Skip to main content
IG Downloader by Downloaderize

Legal

Privacy Policy

Last updated:

This Privacy Policy explains how Downloaderize (“we”, “us”) collects, uses and protects information when you use IG Downloader at ig.downloaderize.com (the “Service”). We designed the Service to work with as little personal information as possible.

Summary

  • You don’t need an account, and we never ask for your Instagram login.
  • We do not store the videos, photos or audio you download.
  • Usage logs contain a one-way hash of your IP address, never the IP itself, and are deleted after 90 days.
  • Analytics and marketing cookies are off unless you opt in.
  • We do not sell your personal information.

Who is responsible for your data

Downloaderize is the data controller for the processing described here. You can contact us about privacy at privacy@downloaderize.com or through our privacy request form.

Information we process

When you download a post

  • The link you paste. We use it to fetch the public Instagram post and find its media files. The resulting download information is cached for up to 30 minutes so repeated requests are fast, then discarded.
  • Usage log entries. For each request we record the Instagram post’s shortcode (the code in its link), whether it succeeded (or the error type), the time, and a salted SHA-256 hash of your IP address. We use these to keep the Service running, prevent abuse and understand overall usage.
  • Visitor statistics. The page sends this site a few anonymous facts about each visit: the page address, the referring website’s domain, the device type (phone, tablet or computer), the browser language, how long the page was visible, searches you make on the site, which download options you press, and whether an ad blocker or the human check was involved. Visits are grouped by a random id kept in your browser’s storage (see the Cookie Policy); no cookie, no IP address and nothing that identifies you is used. They are kept for 395 days.
  • Download tokens. Each download button carries a random, temporary token that maps to the Instagram file for up to 60 minutes.

When you contact us or submit a privacy request

We store your name, email address, the topic and content of your message (or request), a hash of your IP address and, for contact messages, your browser’s user-agent string. We use this only to respond to you, keep a record of our correspondence and protect the forms against spam.

Technical data

Like every website, our hosting provider’s web servers record standard access logs (IP address, date and time, requested page, browser user-agent and referrer) for security and troubleshooting. These logs are kept for a short period by our host and are not used to identify you.

Cookies

Most pages set no cookies at all. Our forms use essential security cookies, and optional analytics or marketing cookies are only set with your consent. See the Cookie Policy for the full list.

Instagram / Meta

The Service retrieves publicly available information from Instagram on your behalf. Video files, photos, audio files and preview images are all delivered through our server, so your browser never connects to Instagram or Meta when you use the Service, and Meta does not receive your IP address from it. We are not affiliated with Instagram or Meta; see Instagram’s Privacy Policy for how Instagram itself handles data.

  • Providing the Service you request: performance of a contract / your request (GDPR Art. 6(1)(b)).
  • Security, abuse prevention and service statistics based on pseudonymised logs: our legitimate interests (Art. 6(1)(f)).
  • Answering messages and privacy requests: legitimate interests and, for privacy requests, compliance with legal obligations (Art. 6(1)(c)).
  • Optional analytics and marketing cookies: your consent (Art. 6(1)(a)), which you can withdraw at any time on the Cookie Preferences page.

Who we share data with

We do not sell or rent personal information. We share it only with service providers that help us run the Service, under contracts that require them to protect it:

  • Web hosting (servers, databases and backups).
  • Email delivery (to send replies and request acknowledgements).
  • Cloudflare: our network and security provider. When you press the button beside the link field, Cloudflare Turnstile checks that you are a person and not an automated program, using technical signals from your browser and device; it does not use them for advertising. See Cloudflare’s Privacy Policy.
  • Google: reCAPTCHA spam protection on forms when enabled; Google Analytics and Google Ads only with your consent. To check whether an ad blocker is active, the page asks once for Google’s ad script address and looks at whether the request is blocked; no cookies are set and nothing is stored.
  • Google AdSense shows the ads on this site. Until you allow marketing cookies we ask Google for non-personalised ads, which Google still serves with cookies or similar storage for frequency capping, aggregated reporting and fraud prevention; with your consent, ads may be personalised. See how Google uses information from sites that use its services.
  • Microsoft Clarity and Meta Pixel: only if enabled and only with your consent.

We may also disclose information when required by law, or to protect our rights, our users or the public.

How long we keep data

  • Cached download information: up to 30 minutes; download tokens: up to 60 minutes.
  • Pseudonymised usage logs: 90 days, then automatically deleted.
  • Visitor statistics: 395 days, then automatically deleted.
  • Contact messages: up to 24 months after our last correspondence.
  • Privacy requests: 24 months after completion, to demonstrate compliance.

Security

The Service is served only over HTTPS with HSTS, uses a strict Content Security Policy, rate limiting, spam protection and a human check (Cloudflare Turnstile) on downloads, stores no raw IP addresses in its logs, and restricts access to stored messages to authorised administrators. No method of transmission or storage is completely secure, but we work hard to protect your information.

International transfers

Our service providers may process data in countries outside your own, including the United States. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict processing, to withdraw consent, and to opt out of the sale or sharing of personal information. Read more for EU/UK residents (GDPR) and California residents (CCPA/CPRA), then submit a request. We will not discriminate against you for exercising your rights.

Children

The Service is not directed to children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect their personal information. If you believe a child has sent us personal information, contact us and we will delete it.

Changes to this policy

We may update this policy as the Service evolves. We will change the “Last updated” date above and, for significant changes, display a notice on the site.

Contact

Questions or complaints? Email privacy@downloaderize.com. You also have the right to complain to your local data protection supervisory authority.