1. Introduction
DownSta ("we," "us," or "our") operates the DownSta website and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. Please read this policy carefully.
DownSta is an independent application and is not affiliated with Instagram™ or Meta™.
2. Information We Collect
Personal Identification Information
We may collect personal identification information from users in a variety of ways, including but not limited to when users visit our site, fill out a contact form, or engage with other activities, services, features, or resources we make available. Users may visit our site anonymously. We will collect personal identification information from users only if they voluntarily submit such information to us. Users can always refuse to supply personal identification information, except that it may prevent them from engaging in certain site-related activities (such as submitting a contact request).
Non-Personal Identification Information
We may collect non-personal identification information about users whenever they interact with our site. Non-personal identification information may include the browser name, the type of device, technical information about users' means of connection to our site (such as the operating system, internet service providers utilized, and similar technical data).
Submitted URLs and Media
Instagram™ URLs submitted through our tool are processed temporarily to resolve and deliver public media. This data is transient:
- Resolution manifests are deleted after 15 minutes
- Preview objects are deleted after 15 minutes
- Download objects are deleted after 30 minutes
- A backup lifecycle safety-net removes all temporary objects within 1 day
Submitted URLs and media are not stored permanently. No download history, user library, or persistent log of submitted URLs is maintained.
3. Web Browser Cookies
Our site may use cookies to enhance user experience. Users may choose to set their web browser to refuse cookies or to alert them when cookies are being sent. If they do so, note that some parts of the site may not function properly. Cookies may be set by:
- Our hosting provider (for security, performance, and content delivery)
- Advertising partners (see Section 6 below)
4. How We Use Collected Information
DownSta may collect and use information for the following purposes:
- To process your requests: The Instagram™ URL you submit is used only to resolve the public media and generate temporary download links. This processing is transient and automated.
- To improve our service: We may use aggregated, anonymized data (such as request volume, error rates, and latency) to monitor and improve the performance and reliability of DownSta.
- To serve advertisements: We may use advertising partners to display ads. These partners may use cookies and similar technologies to deliver relevant advertisements.
- To respond to your inquiries: If you contact us through our contact form, we will use the information you provide (such as your name and email address) solely to respond to your inquiry.
5. Information We Do Not Collect
- No Instagram™ login credentials, passwords, session IDs, or account information
- No browser cookies beyond what our hosting provider and advertising partners set for normal operations
- No analytics or tracking scripts beyond what is described in this policy
- No download history, media library, or persistent user profiles
6. Advertising
Advertisements appearing on our site may be delivered to users by advertising partners. These partners may set cookies that enable the ad server to recognize your computer each time they send you an online advertisement. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you.
DownSta currently has no advertising partner selected. If and when we select an advertising partner, this policy will be updated to reflect the partner's name and data practices. We will use contextual (non-personalized) advertising as the default model.
This privacy policy does not cover the use of cookies by any advertisers. We encourage users to review the privacy policies of any advertising partners for more information.
Google AdSense (when enabled)
Some of the ads may be served by Google. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and other sites on the internet. You may opt out of personalized advertising by visiting Google's Ads Settings.
7. Data Retention
We retain data only for as long as necessary to fulfill the purposes described in this policy:
- Resolution manifests: 15 minutes
- Preview objects: 15 minutes
- Download objects: 30 minutes
- Storage lifecycle safety-net: 1 day maximum
8. Third-Party Services
DownSta uses third-party hosting and content delivery services for application deployment and temporary storage. The respective privacy policies of these providers apply to data processed through their infrastructure. We do not share submitted URLs, media content, or personal information with any other third parties.
9. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- HMAC-signed download tokens with short expiration times
- Private R2 bucket storage (not publicly accessible)
- Restricted CORS policy
- Rate limiting on all API endpoints
- Input validation and size limits
10. Changes to This Privacy Policy
DownSta has the discretion to update this privacy policy at any time. When we do, we will revise the updated date at the top of this page. We encourage users to frequently check this page for any changes to stay informed about how we are helping to protect the information we process. You acknowledge and agree that it is your responsibility to review this privacy policy periodically and become aware of modifications.
11. Your Acceptance of These Terms
By using DownSta, you signify your acceptance of this policy. If you do not agree to this policy, please do not use our site. Your continued use of the site following the posting of changes to this policy will be deemed your acceptance of those changes.
12. Contact
If you have questions about this Privacy Policy, please contact us.