Privacy policy

• No accounts and no Instagram credentials. There is nothing to sign up for, and we never ask for your Instagram username, password, session cookie or token.
• We do not store the media you download. Files are fetched by your browser from Instagram’s CDN and never written to disk on our side.
• The site is funded by advertising. Our advertising partners, including Google, set cookies and similar identifiers. Section 5 explains this in full and how to opt out.
• You have real, exercisable rights. Sections 8 and 9 set out GDPR, UK GDPR and US state privacy rights and how to use them.

Information you provide

• Instagram URLs you paste. Processed in memory to resolve the post. A normalised post key and the resulting CDN URLs may remain in a shared in-memory cache for up to two hours. They are not written to a database, not linked to you, and not used to build a profile.
• Public profile details, for profile lookups only. When you look up an account’s profile picture we also read that account’s public header — username, display name, bio, link, verified status and the post, follower and following counts — and show it so you can confirm you have the right account. This is the same information Instagram shows any logged-out visitor. It is held in memory alongside the avatar for up to two hours and is never written to a database. Resolving a post, reel or carousel returns media URLs only, with nothing about who posted it.
• Contact form and email. Your name, email address, chosen subject and message, kept only as long as needed to handle the matter (see section 7).

Information collected automatically

• Server logs — IP address, timestamp, requested path and user agent, used for security, abuse prevention and rate limiting.
• Rate-limit counters — a count of requests per address, held in memory on a rolling window.
• Advertising and consent data — cookies, device identifiers and approximate location collected by our advertising partners, described in section 5.

What we never collect

• Instagram usernames, passwords, session cookies or tokens.
• The media files themselves — they travel from Instagram’s CDN to your browser and are never stored by us.
• Payment or financial information. The service is free and there is nothing to pay for.
• Special-category data: health, biometrics, precise GPS location, political opinions, religious beliefs, or sexual orientation.
• Data knowingly collected from children under 13.

IGDownPro is free to use and is paid for by advertising. That is the honest trade, and this section explains exactly what it means for your data.

Third-party advertising vendors

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
• Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
• You may opt out of personalised advertising by visiting Google Ads Settings. You may opt out of a third-party vendor’s use of cookies for personalised advertising at aboutads.info.
• Where consent has not been given, or has been withdrawn, ads may still be shown but are limited to non-personalised advertising, which uses contextual signals and coarse information such as approximate location, and still requires some storage for frequency capping and fraud prevention.

Categories of cookies used here

• Strictly necessary. Needed to serve the page and apply rate limits. These cannot be switched off and are not used to track you between sites.
• Preferences (local storage). The downloader keeps up to five recently pasted links in your browser’s local storage. That list never leaves your device, is not sent to us as a history, and can be cleared from the recent-links panel or your browser settings.
• Consent record. Your choice in the consent banner is stored so we do not ask again on every page.
• Advertising. Set by Google and other advertising partners to select ads, cap how often you see one, measure performance and detect fraud.

Your consent, and how to change it

If you are in the European Economic Area, the United Kingdom or Switzerland, we ask for your consent before any non-essential cookie is set. Consent is collected through Google’s consent management platform (the “Privacy & messaging” CMP), which is certified by Google and registered with the IAB Transparency & Consent Framework. The banner records your choice and lets you review each purpose and each advertising vendor before you agree.

You can change or withdraw that choice at any time using the Cookie settings link in the footer of every page, which reopens the same consent message — withdrawing is as easy as giving. Withdrawal does not affect processing that already took place, and choosing to refuse does not stop you using the downloader.

Independently of the banner, you can block or delete cookies in your browser settings, and browser privacy modes reduce what can be stored. Blocking every cookie does not break the downloader.

Opt-out links

• Google Ads Settings — Turn off ad personalisation across Google's own services and its partner network, including ads shown here.
• How Google uses information from partner sites — Google's own description of what it collects when you visit a site that uses its advertising products.
• YourAdChoices (DAA, United States) — Industry-wide opt-out from interest-based advertising by participating US vendors.
• Your Online Choices (EDAA, Europe) — The equivalent opt-out for participating vendors across the EEA and the UK.
• NAI opt-out — Network Advertising Initiative member opt-out, covering many ad-tech vendors at once.

We honour the Global Privacy Control signal where your browser sends one, and treat it as an opt-out of the sale or sharing of personal information.

If you are a resident of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana or another state with a comprehensive privacy law, you have the right to know what personal information is collected and for what purpose, to request deletion or correction, to obtain a portable copy, to opt out of the sale or sharing of personal information and of targeted advertising, and not to be discriminated against for exercising any of these rights.

To opt out of targeted advertising, use the Cookie settings link in the footer, the vendor opt-outs in section 5, or send a browser Global Privacy Control signal, which we honour. To make any other request, write to privacy@igdownpro.com. We respond within 45 days, extendable once by a further 45 days where reasonably necessary.

An authorised agent may submit a request on your behalf with written proof of authorisation. We do not sell personal information for monetary consideration, and we do not knowingly sell or share the personal information of anyone under 16.

The site is served over HTTPS. Media bytes never pass through our application server, and there is no account database to breach — the strongest security measure available here is simply not holding the data in the first place, and it is the one we have leaned on.

No system is perfectly secure. If you believe you have found a vulnerability, please report it to support@igdownpro.com with reproduction steps. We investigate security reports first, and we will not pursue action against good-faith researchers who give us a reasonable chance to fix an issue before disclosing it.

We may revise this policy as the service or the law changes. The effective date at the top records the most recent revision, and a material change — a new category of data, a new purpose, or a new class of recipient — will be signalled on the site before it takes effect. Continuing to use the site after a change means you accept the revised policy.

See also our terms of service, our DMCA and copyright policy, and the about page for how the service works.