Privacy
This page lists what the site processes when you use it. It does not require an account, and it never asks for your Instagram login.
When you visit
- The site runs on Cloudflare, which handles each request, including your IP address and browser details, to deliver pages and protect the service from abuse.
- To enforce the daily lookup limit we store a counter keyed by a one-way hash of your IP address, a secret value and the date. It cannot be turned back into your IP address, it changes every day, and counters are deleted after two days.
- Before a new lookup runs, Cloudflare Turnstile checks that a person is asking. After it passes, a cookie named
svf_passremembers the check for 30 minutes. It is used for nothing else. - We count page views and lookups in aggregate. Cloudflare Web Analytics measures visits without cookies. Google Analytics also runs, which sets its own cookies to tell repeat visits apart and records which pages were opened, what was searched for and when a story player was opened. It never receives a name, an email address or anything else that identifies you.
- Pages with an "Advertisement" label load banner ads from Adsterra, which sets its own cookies and browser storage to count views and choose ads.
- Your recent searches are saved in your own browser only, never sent to us, and you can turn this off on the home page.
Instagram data
The site shows content that Instagram accounts have made public. It keeps copies for a limited time, as described on the how it works page, and deletes everything except the username when an account owner has their profile removed.
Removal requests
A removal request stores the username, a verification code and the request times. It doesn't ask for your name or email.