Legal
Privacy Policy
How the operator of IGDownload.net handles information when you use this site.
Section 1
What is processed
Your browser sends standard request information, such as your IP address and user-agent, with every request. The site uses only the IP address, to apply rate limits and respond to abuse. IP addresses used for rate limiting are held only in server memory and are never written to disk. Separately, Google Analytics runs in your browser and sends device, browser, and page information to Google, as described in the Cookies section.
Section 2
The link you paste
The Instagram link you paste is sent to Instagram, directly or through a relay operated by the site owner, only to look up public media. The extraction result is kept in server memory for up to 8 minutes so the download buttons can reuse it. Each download button carries a signed token that contains the link and expires after 10 minutes. Media is written to a private temporary directory only while a download is running and is deleted immediately afterwards.
Section 3
What is never collected
There are no accounts and no Instagram login. Download history is not stored. Raw IPs and URLs are never logged. The operator does not sell personal data. Page views and site interactions are measured with Google Analytics, as described in the Cookies and Third parties sections.
Section 4
Legal basis
Where the GDPR or the UK GDPR applies, the processing described here is based on legitimate interests under Article 6(1)(f): running the tools you ask for, keeping the service available, preventing abuse, and measuring how the site is used. Google Analytics loads on each page without a separate consent prompt.
Section 5
Logs and retention
Each request produces one structured log line containing a request id, the path with any download token removed, the status, the duration, and a truncated hash of the client IP. When you paste a link, the line also holds a truncated hash of that link and the detected media type. Raw IPs, URLs, query strings, and tokens are never logged. Log lines are deleted automatically after 14 days.
Section 6
Cookies
The site itself does not set account or download cookies. Google Analytics, measurement ID G-6RE7G204LM, may set cookies such as _ga in your browser and send page-view and interaction data, such as scrolling and clicks on links to other sites, to Google.
Section 7
Third parties
Requests are made to Instagram, directly or through a relay operated by the site owner, and those requests are subject to Instagram’s own policies. Google Analytics receives page-view and interaction data under Google’s own policies.
Section 8
Children
The site is not intended for anyone under 16. It does not knowingly process information about children beyond the technical request data described above.
Section 9
Your rights and contact
Depending on where you live, including the EU, the EEA, and the UK, you may have the right to access, correct, or erase your personal data and to restrict or object to its processing. You may also complain to your local data protection authority. Logs hold only hashed identifiers and are deleted after 14 days, so the operator usually cannot link a log line to you. Send privacy requests to [email protected].