1. Introduction
DownSta ("we," "us," or "our") operates the DownSta website and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully.
DownSta is an independent application and is not affiliated with Instagram™ or Meta™.
2. Information We Collect
Personal Identification Information
We may collect personal identification information from users in a variety of ways, including but not limited to when users visit our site, fill out a contact form, or engage with other activities, services, features, or resources we make available. Users may visit our site anonymously. We will collect personal identification information from users only if they voluntarily submit such information to us. Users can always refuse to supply personal identification information, except that it may prevent them from engaging in certain site-related activities (such as submitting a contact request).
Non-Personal Identification Information
We may collect non-personal identification information about users whenever they interact with our site. Non-personal identification information may include the browser name, the type of device, technical information about users' means of connection to our site (such as the operating system, internet service providers utilized, and similar technical data).
Submitted URLs and Media
Instagram™ URLs submitted through our tool are processed temporarily to resolve and deliver public media. This data is transient:
- Resolution manifests are deleted after 15 minutes
- Preview objects are deleted after 15 minutes
- Download objects are deleted after 30 minutes
- A backup lifecycle safety-net removes all temporary objects within 1 day
Submitted URLs and media are not stored permanently. No download history, user library, or persistent log of submitted URLs is maintained.
3. Web Browser Cookies
Our site may use cookies to enhance user experience. Users may choose to set their web browser to refuse cookies or to alert them when cookies are being sent. If they do so, note that some parts of the site may not function properly. Cookies may be set by:
- Our hosting provider (for security, performance, and content delivery)
- Advertising partners (see Section 6 below)
4. How We Use Collected Information
DownSta may collect and use information for the following purposes:
- To process your requests: The Instagram™ URL you submit is used only to resolve the public media and generate temporary download links. This processing is transient and automated.
- To improve our service: We may use aggregated, anonymized data (such as request volume, error rates, and latency) to monitor and improve the performance and reliability of DownSta.
- To serve advertisements: We may use advertising partners to display ads. These partners may use cookies and similar technologies to deliver relevant advertisements.
- To respond to your inquiries: If you contact us through our contact form, we will use the information you provide (such as your name and email address) solely to respond to your inquiry.
5. Information We Do Not Collect
- No Instagram™ login credentials, passwords, session IDs, or account information
- No browser cookies beyond what our hosting provider and advertising partners set for normal operations
- No analytics or tracking scripts beyond what is described in this policy
- No download history, media library, or persistent user profiles
6. Advertising
DownSta uses Google AdSense to serve advertisements. Google and its partners may use cookies, device information, and similar technologies to measure ad delivery and provide personalized or non-personalized advertising, subject to user settings, regional requirements, and available consent controls.
The AdSense loader is included on public pages, but ads may not appear until the account and site settings are fully configured. We do not use advertising scripts to collect submitted Instagram URLs, raw media URLs, or downloaded media.
Review Google's privacy practices and manage personalized advertising choices through Google's Ads Settings and Google's Privacy Policy.
Google AdSense
Google may use advertising cookies to recognize your browser when serving ads on this site and elsewhere. The information Google processes is governed by Google's own terms and privacy policy.
7. Data Retention
We retain data only for as long as necessary to fulfill the purposes described in this policy:
- Resolution manifests: 15 minutes
- Preview objects: 15 minutes
- Download objects: 30 minutes
- Storage lifecycle safety-net: 1 day maximum
8. Third-Party Services
DownSta uses third-party hosting and content delivery services for application deployment and temporary storage, and Google AdSense for advertising. The respective privacy policies of these providers apply to data processed through their infrastructure. We do not send submitted URLs, raw media URLs, or media content to Google AdSense.
9. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- HMAC-signed download tokens with short expiration times
- Private R2 bucket storage (not publicly accessible)
- Restricted CORS policy
- Rate limiting on all API endpoints
- Input validation and size limits
10. Changes to This Privacy Policy
DownSta has the discretion to update this privacy policy at any time. When we do, we will revise the updated date at the top of this page. We encourage users to frequently check this page for any changes to stay informed about how we are helping to protect the information we process. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.
11. Your Acceptance of These Terms
By using DownSta, you signify your acceptance of this policy. If you do not agree to this policy, please do not use our site. Your continued use of the site following the posting of changes to this policy will be deemed your acceptance of those changes.
12. Contact
If you have questions about this Privacy Policy, please contact us.