Privacy Policy

Scope

This policy applies to the public Instagram media downloader on this site. The downloader does not require an account, an Instagram password, payment details, or a subscription.

Information processed

• Anonymous credit identity: the server creates a cryptographically random visitor credential of at least 256 bits and stores it in a persistent, first-party HttpOnly cookie. The cookie contains no balance, IP address, device information, or media history. The D1 database stores only its SHA-256 digest as the visitor key, not the original credential.
• Credit and operation metadata: D1 stores the anonymous balance (available, reserved, and spent credits) and operation metadata: operation ID, type, units, reservation/settled/released status, an irreversible request fingerprint, and creation, update, and expiration times. It does not store the raw visitor credential, username history, media or download URLs, access tokens, or your full selection. Each anonymous visitor identity has a fixed 40 credits, with no daily or refresh-based reset.
• No hardware fingerprinting: the downloader does not collect browser fingerprints, canvas fingerprints, hardware serial numbers, or a claimed unique computer identifier. IP-based rate limiting is separate from the anonymous credit identity.
• Search input: the Instagram username or profile URL you enter is sent to our server and then to TikHub so public account and media metadata can be retrieved.
• Technical data: your IP address and request timing are used for abuse prevention and rate limiting. In production, persistent counters contain an HMAC-SHA-256 digest derived from the IP, API operation, and time window rather than the raw IP. These counters support cross-instance limiting and are periodically deleted after expiry. A separate aggregate daily TikHub request counter contains no IP identifier.
• Preferences: language, theme, and consent choices may be stored in cookies or similar browser storage. Optional analytics or advertising cookies are used only when enabled by the site operator and, where required, allowed by you.

Media and download processing

Media previews are loaded from Instagram's content delivery infrastructure. Single-file and ZIP downloads pass through our server in bounded streams. Download tickets are encrypted and expire after 15 minutes. A pagination cursor that contains pending media expires no later than 15 minutes after that pending media was created; other pagination cursors expire after 60 minutes. Credit reservations and same-operation idempotent retries use a 15-minute window. This window does not guarantee that an upstream media URL will remain usable for 15 minutes.

We do not permanently store downloaded images, videos, ZIP archives, complete upstream responses, or long-lived signed media URLs. We do not store media binaries in the application database. We do not maintain a public search history or download history by default.

Third-party services

TikHub processes account queries and returns public Instagram metadata. Instagram and its content delivery providers process preview and media requests. Their own terms and privacy policies also apply. Do not submit private, deleted, restricted, or otherwise unavailable content for retrieval.

Security and retention

We use bounded requests, encrypted short-lived tickets, upstream host allow-lists, and content checks to reduce abuse. No Internet service can guarantee absolute security or uninterrupted availability. Operational error records should contain only error categories, request identifiers, timing, and necessary counts, not access tokens or complete signed media URLs.

The anonymous visitor cookie persists for one year. The production retention configuration for D1 credit and operation rows has not yet been confirmed for launch. This policy does not claim that automatic deletion or cleanup is already configured. Reservations that expire during the 15-minute lifecycle may be released by later credit operations; that operational state change is not a general data-retention guarantee.

Your choices

You can use the downloader without creating an account. You can change the interface language and theme in your browser and clear stored site preferences through your browser settings. Clearing site data removes the anonymous visitor cookie; a later visit may be treated as a different anonymous identity rather than resetting the same identity's balance. For access, correction, or deletion questions about operational data in this deployment, use the site operator's published support channel.

Changes

We may update this policy as the service changes. The date above shows the latest revision.