Privacy Policy
The full, current policy lives at safeunfollow.app/privacy. That page is the only one we maintain, and it is the one to read before deciding whether to trust this tool. This page exists so the documentation has a Privacy entry; it deliberately does not restate the policy, because a second copy is a second thing to keep true.
The short version
Your Instagram export never leaves your browser. The ZIP is opened, parsed and stored locally in IndexedDB. There is no account, no Instagram login, and no server that receives your Instagram export — which is also why nothing on this page, advertising included, can be targeting it.
That claim is about your Instagram data, and only about it. The site itself does talk to a handful of third parties, and the canonical policy names what each one receives:
| Who | What they get | Where |
|---|---|---|
| Vercel | standard web server logs (IP, timestamp, requested URL) | every page |
| Umami | page views, product events, and measurements of the export you load — how many accounts it holds and how large the file is. No personal identifiers, no usernames, nothing read from inside the archive | every page |
| Google AdSense | ad requests and advertising cookies, subject to your consent choice | the units we place are on /results; Google’s own automatic placements can appear on any screen once its script has started |
| Google (Funding Choices) | your consent choice, stored so the banner stops asking | consent regions |
| Affiliate networks | only what a link click sends, and only if you click | /upload |
| Dodo Payments | your licence key, your email if you buy the export, and — attached to the checkout link — whether you are on a phone or a big screen, the language you are reading in, and your country | export only |
| Tally | the feedback you type, plus your language, the page you sent it from and the site version — and only if you open the form | /results, on click |
Ads run on this site, and /upload carries one affiliate link. That is how the free analysis
is paid for. None of them receives the export itself — it is never uploaded anywhere. Our own analytics do record measurements of it, and the canonical policy names them.
Verify rather than believe
- Source code: github.com/ignromanov/safe-unfollow — MIT, auditable
- Network tab: upload a file with DevTools open; no request carries its contents
- Offline: run an analysis, then cut the network — everything you have already opened keeps working; a first visit still needs a connection
Related
- Full Privacy Policy — the canonical document
- Terms of Service
- Security policy — for reporting vulnerabilities
Last updated: