1. Introduction & Data Controller

Welcome to InstaSave ("we", "our", "us", or "the Service"). We operate the online media utility available at instasavee.com.

Data Controller: Shubham Kumar Gupta

Address: Adarsh Colony, Nooranganj, Sasaram

Contact Email: support@instasavee.com

This Privacy Policy outlines what information is collected, how it is processed, the technical measures employed to safeguard your privacy, and your rights under global data protection regulations, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

2. Zero-Knowledge Credential Policy

InstaSave is engineered with a strict zero-knowledge privacy architecture. We do not require account registration, email sign-ups, or social logins to use our downloader.

We never ask for, intercept, or store your Instagram username, password, two-factor codes, or login tokens.
We never bypass creator restrictions or access private, restricted, or password-protected content.
All media lookups operate purely on publicly accessible URLs submitted directly by the user.

3. Technical Information Collected & How It Is Used

To prevent malicious denial-of-service (DoS) attacks, ensure rate limiting compliance, and diagnose server errors, our systems process minimal technical metadata:

• Cryptographically Hashed IP Addresses: To enforce fair usage limits without storing identifiable personal data, client IP addresses are transformed using a one-way cryptographic SHA-256 HMAC hash before being checked against rate-limiting counters.

• Requested Media URLs: The public Instagram URL submitted into the downloader form is processed in real-time to extract the corresponding public video or photo stream.

• Contact Submissions: When you voluntarily submit an inquiry through our Contact Support page, we collect your name, email address, inquiry topic, message content, and originating IP address solely to review, respond to, and resolve your request. This information is retained only as long as necessary to address your communication.

• Standard Browser Telemetry: Standard HTTP request headers (such as browser User-Agent and language preference) are utilized strictly for responsive layout rendering and security audit logs.

4. Temporary Stream Buffering & Automatic Cache Purging

InstaSave does not operate a permanent storage repository, archive, or database of downloaded media. Media streams requested by users are relayed using temporary signed session tokens valid for 15 minutes.

When preparing multi-slide carousel albums or streams, files are temporarily buffered on our server in an isolated storage directory. Any transient temporary cache files or ZIP archives are purged immediately after transmission and systematically deleted by automated background maintenance cron jobs every 30 minutes.

5. Cookies, Choice & Consent Disclosures

Cookies are small text files placed on your device by your browser. We utilize minimal cookies and browser LocalStorage strictly for functional and security purposes:

Essential Security & Session Cookies: Cryptographic CSRF session tokens to safeguard form submissions and anonymized request headers to enforce rate limiting.
Functional Local Storage: To persist your cookie preferences (instasave_cookies_choice: "all" or "essential").

Our on-site banner provides visitors with an explicit choice between "Accept All" and "Essential Only". Please note that this banner functions as an on-site preference control for our platform. For full GDPR/ePrivacy compliance in the European Economic Area (EEA) and the UK where Google AdSense is active, publishers should also utilize a Google-certified Consent Management Platform (CMP) supporting IAB Europe's Transparency and Consent Framework (TCF v2.2), which can be activated directly within the Google AdSense Privacy & Messaging console.

6. Google AdSense & Third-Party Advertising Disclosures

We may partner with third-party advertising companies, including Google LLC (Google AdSense), to display ads when you visit our website. These companies may use cookies and web beacons to serve advertisements based on your prior visits to this website or other sites across the Internet.

Google DART Cookie Disclosure: Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to InstaSave and/or other sites on the Internet.

Users may opt out of personalized advertising by visiting Google My Ad Center. Alternatively, you can opt out of third-party vendor cookies for personalized advertising by visiting AboutAds.info or the Network Advertising Initiative.

7. GDPR Data Protection Rights (EEA & UK Users)

If you reside within the European Economic Area (EEA) or United Kingdom, you have specific data protection rights under the General Data Protection Regulation (GDPR). Because we do not collect personal identifiers or user accounts, our data processing is minimal:

Right of Access: You have the right to request confirmation regarding data processed.
Right to Erasure / Rectification: You may request the deletion of any temporary error log entries or contact submissions relating to your connection.
Right to Object & Restrict Processing: You can configure your browser to reject non-essential cookies.

8. California Privacy Rights (CCPA / CPRA)

Under the California Consumer Privacy Act and California Privacy Rights Act, California residents have the right to know what categories of personal information are collected and the right to opt out of the sale or sharing of personal data.

We do not sell, rent, or monetize your personal information. We do not share personal consumer records with data brokers.

9. Children's Online Privacy Protection (COPPA)

InstaSave is not intended for use by children under the age of 13. We do not knowingly collect or solicit personal information from children under 13. If you believe that a minor has provided personal details through our contact form, please reach out so we can promptly delete the information.

10. External Links & Security Standards

Our site may contain links to external websites (e.g., Instagram, Meta, advertisers). We are not responsible for the content or privacy practices of external platforms. We encourage you to review the privacy policies of any third-party websites you visit.

We employ industry-standard HTTPS TLS encryption, HTTP Strict Transport Security (HSTS), rate-limiting algorithms, and automated server hardening to protect our infrastructure against unauthorized access.

11. Contacting Us About Privacy

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us through our dedicated Contact Support Page.