Privacy Policy

How we handle data while providing anonymous viewing of public Instagram content.

Last updated: 2026-08-30

Who we are (Controller)

InstaIncognito (‘we’, ‘us’) is the data controller for data described in this Policy. If you reside in the EEA/UK/Switzerland, you can contact us regarding data requests at support@instaincognito.com.

Overview

InstaIncognito’s website lets you view publicly available Instagram content without logging in; we do not request your Instagram credentials for the website, and we do not host Instagram media. If you choose to install our optional Companion browser extension, it uses your own Instagram session on your device to retrieve lists of accounts you follow — see “InstaIncognito Companion (browser extension)” below.

Data we collect

• Technical & security logs — IP address, timestamps, user-agent, pages/URLs requested, and basic error/diagnostic information to operate, secure, and debug the Service.
• Contact messages — If you write to us (e.g., via the contact form or email), we collect the information you provide (name, email, message).
• Preferences & local storage — We may store non-identifying preferences in your browser (e.g., language, UI settings).
• Companion extension data — If you use our optional browser extension, the follower/following lists you explicitly request (see the Companion section below).

How we use data

• Provide, operate, and secure the Service (fraud/abuse prevention, rate-limiting, debugging).
• Measure and improve performance and features.
• Respond to support and takedown requests.

Legal bases (GDPR/UK GDPR)

• Legitimate interests — to operate, secure, and improve the Service (Art. 6(1)(f)).
• Contract — to provide requested features and respond to your inquiries (Art. 6(1)(b)).
• Consent — where required for optional cookies/analytics/ads (Art. 6(1)(a)).
• Legal obligation — to comply with applicable law or law-enforcement requests (Art. 6(1)(c)).

Cookies & similar technologies

We may use cookies or local storage to remember preferences and improve performance. You can disable cookies in your browser; some features may not work as intended.

If we use analytics or advertising cookies in your region, we will ask for your consent via a banner, and you can withdraw consent at any time from the cookie settings.

Data sharing & processors

We share data with service providers who process it on our behalf (e.g., hosting, logging, security, analytics if enabled). They are bound by contractual obligations and may not use data for their own purposes.

We do not sell personal data.

International transfers

If data is transferred outside your region (e.g., to the US), we use appropriate safeguards consistent with applicable law (such as the EU Standard Contractual Clauses).

Retention

Security logs are kept for a limited time needed for operations and abuse prevention, then deleted or aggregated. Contact messages are kept as long as needed to handle your request and comply with legal obligations.

Your rights

Depending on your location, you may have rights to access, rectify, delete, restrict, or object to processing, and to data portability. You can also withdraw consent where processing is based on consent.

To exercise rights, email support@instaincognito.com. If you are in the EEA/UK, you may lodge a complaint with your local supervisory authority.

Children’s privacy

We do not knowingly collect personal data from children under 16. If you believe a child provided data, contact us and we will delete it.

Instagram content & third-party sites

We do not host Instagram media. Links resolve to Instagram’s own servers where applicable. Third-party sites have their own policies; we are not responsible for their content or practices.

InstaIncognito Companion (browser extension)

InstaIncognito offers an optional browser extension, “InstaIncognito Companion.” If you install and connect it, the following applies in addition to the rest of this Policy:

• On-device processing with your own session. — The extension runs on your device and uses your own logged-in Instagram session, in your browser, to retrieve the follower and following lists of Instagram accounts you follow. Each lookup happens only when you explicitly request it.
• We never receive your Instagram login. — Your Instagram username, password, and session cookies remain in your browser. They are never collected, stored, or transmitted to us.
• What we receive. — Only the follower/following list you request is sent, over HTTPS, to your own InstaIncognito account, where it is stored so you can view, search, and track changes to it. This list may include profile fields such as usernames, display names, profile pictures, and verified/private status.
• Local token. — The extension stores a single connect key, issued by your InstaIncognito account, in your browser’s local storage so it can authenticate to your account. You can remove it at any time by clicking Disconnect or uninstalling the extension.
• No selling or third-party sharing. — We do not sell this data or share it with third parties; it is used only to provide InstaIncognito features to you.

Security

We apply reasonable technical and organizational measures to protect data. No method of transmission or storage is 100% secure.

Changes to this policy

We may update this Policy. We will post the new version here with an updated “Last updated” date.

Contact

Questions or requests? Email support@instaincognito.com.