Privacy Policy
Last updated: March 19, 2026
Welcome to InstDL (“we”, “our”, or “us”), accessible at instdl.site. This Privacy Policy explains how we collect, use, and protect information when you visit our website and use our tools, including our Instagram downloader, caption generator, font generator, and link in bio builder.
By using InstDL, you agree to the terms of this Privacy Policy. If you do not agree, please stop using the service.
1. Information We Collect
Information You Provide
InstDL does not require you to create an account or provide personal information to use our core tools. The only information you voluntarily provide is:
- Instagram URLs or usernames — when you paste a link or enter a username to use our downloader or profile viewer. We do not store these after your session ends.
- Contact form submissions — if you contact us via our contact page, we collect your name, email address, and message content solely to respond to your enquiry.
- Bio link page data — if you create a link in bio page, we store your chosen username, display name, bio, links, and theme preferences in our database (Upstash Redis). This data is associated with your edit token, not your personal identity.
Automatically Collected Information
When you visit InstDL, certain information is collected automatically by our hosting infrastructure and third-party services:
- Log data — your IP address, browser type, operating system, referring URL, and pages visited. This is collected by Vercel (our hosting provider) as standard server logs.
- Cookies — we use cookies as described in Section 4 below.
2. How We Use Your Information
We use the information we collect to:
- Provide and operate our tools and services
- Respond to your enquiries and support requests
- Monitor and analyse usage to improve our services
- Detect and prevent abuse, fraud, or security issues
- Display relevant advertisements through Google AdSense
- Comply with legal obligations
We do not sell your personal information to third parties. We do not use your information to build advertising profiles beyond what is described in Section 4 (Google AdSense).
3. Instagram Content
InstDL fetches publicly available content from Instagram's servers based on URLs or usernames you provide. We act as a technical intermediary — we do not store, cache, or retain any Instagram media (videos, photos, or stories) on our servers after your request is fulfilled. All downloads happen directly between our server and Instagram's CDN, and the resulting file is delivered to your browser.
We only process content from public Instagram profiles. We do not access private accounts, Instagram DMs, or any content that requires authentication.
4. Cookies and Advertising
Essential Cookies
If you use our Admin Panel, we set a single session cookie to maintain your login state. This cookie is HttpOnly, Secure, and expires after 8 hours. It contains no personal information.
Google AdSense
We use Google AdSense to display advertisements on our website. Google AdSense uses cookies and similar tracking technologies to serve ads based on your prior visits to this website and other websites across the internet.
Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the internet. You may opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of third-party vendor cookies by visiting aboutads.info.
For more information on how Google uses data collected through AdSense, please visit Google's Privacy & Terms.
Analytics
We may use anonymised, aggregated analytics to understand how visitors use our site (such as which tools are most popular). This data does not identify individual users.
5. Third-Party Services
InstDL uses the following third-party services, each with their own privacy policies:
- Vercel — hosting and deployment. Vercel Privacy Policy
- Cloudflare — backend API (Cloudflare Workers) and DNS. Cloudflare Privacy Policy
- Upstash — database storage for blog posts and bio link pages. Upstash Privacy Policy
- Groq — AI processing for caption generation. Groq Privacy Policy
- Formspree — contact form submission processing. Formspree Privacy Policy
- Google AdSense — advertising. Google Privacy Policy
6. Children's Privacy
InstDL is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete such information from our records.
If you are between 13 and 18, please ensure you have your parent or guardian's permission before using our services.
7. Data Retention
- Download requests — not retained. Processed in real time and discarded immediately.
- Contact form messages — retained only as long as needed to respond to your enquiry.
- Bio link pages — retained until you delete them or request deletion.
- Server logs — retained by Vercel per their standard policy (typically 30 days).
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right to access — request a copy of data we hold about you
- Right to deletion — request deletion of your data
- Right to correction — request correction of inaccurate data
- Right to object — object to processing of your data
- Right to opt out of personalised ads — via Google Ads Settings
To exercise any of these rights, contact us at the email listed on our Contact page.
9. Data Security
We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. However, no internet transmission is 100% secure and we cannot guarantee absolute security.
10. International Users
InstDL is operated from India and our servers are located in the United States (Vercel) and globally (Cloudflare). If you access our service from the European Union, United Kingdom, or other regions with data protection laws, please be aware that your data may be transferred to and processed in countries with different data protection standards.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the “Last updated” date at the top of this page. Continued use of InstDL after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us through our Contact page.