Privacy Policy

Last updated: August 2026

We never ask for your Instagram login

InstaGrab does not request, accept, or store Instagram usernames and passwords, session cookies, or any other credentials. There is no login anywhere in this app. You only ever paste a public link.

We do not store your downloads

When you download something, the file is streamed from Instagram's servers through ours and directly to your device. Nothing is written to permanent storage, and we keep no copy of any photo or video.

What we do keep, and for how long

  • Temporary link cache (about 30 minutes): the media address, resolution, caption and username for links that were recently looked up, so repeat requests are faster. It expires automatically.
  • Error logs: when a fetch fails we record the link type and the error reason — never the link itself, and never anything identifying you — so breakages can be fixed.
  • Rate-limit counters: a one-way hash of your IP address plus a request count, kept for at most 24 hours to prevent abuse. The original IP address is never stored.

Download history stays on your device

The "Recent downloads" list and your theme preference live in your browser's local storage on your own device. They are never sent to us and disappear when you clear the list or your browser data.

Third parties

To resolve links, we send the public link or username to a third-party Instagram media API. No personal information about you is included in that request. Media files themselves are served by Instagram's own content delivery network.

Your responsibility

You are responsible for how you use anything you download. Please respect creators' copyright and only save content you own or have permission to save.

Contact

Questions about this policy? Use the contact page and we will get back to you.