Privacy Policy
This policy explains what information PostsViewer handles when you visit the site or use the Instagram viewer, and why.
Last updated: [DATE]
Draft for legal review. This page describes how the site works today. It has not yet been reviewed by a lawyer and should be checked before launch.
Who is responsible
This website is operated by [LEGAL NAME OF OWNER OR COMPANY], [COUNTRY]. For privacy questions, contact us at [CONTACT EMAIL].
Summary
- We don't ask you to create an account or log in.
- We never ask for your Instagram password or cookies.
- We measure visits with Google Analytics (through Google Tag Manager) only if you click “Accept analytics” in the banner. If you decline or ignore it, no analytics cookies are set.
- We never send the usernames or links you type, or any Instagram content, to Google Analytics.
- The usernames and links you enter are sent to our server and to our data providers (IGramAPI, and InstaGapi for Stories and Highlights) to fetch public information, as explained below.
Information we handle
| What | When | Why | How long |
|---|---|---|---|
| The Instagram username or link you enter | When you use a tool | To look up the public information you asked for | Sent to our server and to IGramAPI. The answer is cached for 5 minutes to 1 hour, then discarded. We don't link it to you |
| Your choice in the analytics banner (accepted or declined) | When you click a button in the banner | To remember your choice so we do not ask again on every page | Stored only in your browser (local storage, key pv_consent) until you clear it. It is not sent to us |
| Analytics events, only if you accepted: pages viewed, which tool page you used, whether a lookup succeeded or failed (error type only), download clicks, menu and link clicks, plus the browser, device, approximate location and referrer that Google Analytics collects | Only after you click “Accept analytics” | To understand which pages and tools are used and to fix problems | Held by Google Analytics. We set its event data retention to [GA4 RETENTION: 2 months unless changed in GA4 Admin]. We never send usernames, links, API data or Instagram content |
| For the optional AI report: the public bio, name, link domain, up to 10 recent captions (shortened) and numbers calculated from the public profile (followers, averages, posting frequency) | Only when you click “Generate AI Audit & Growth Report” or create captions | To write the audit, bio ideas, captions, hashtags and plan with an AI model | Sent by our server to the AI provider (we do not send the username or your IP address). The finished report is kept on our server for about 48 hours so the same account is not analysed twice, then deleted |
| A short-lived counter based on your IP address | When you use a tool | To stop abuse and limit automated requests | Stored only as a one-way hash for about a minute |
| Details you type in the content removal form (name, email, account, message) | Only if you send the form | To handle your removal request | Emailed to the site owner and kept only as long as needed to resolve the request |
| Standard request data (IP address, browser type, page requested, time) | Every visit | Delivering and securing the website | Kept in our hosting provider's (Hostinger) server logs: [LOG RETENTION PERIOD] |
We do not store Instagram photos, videos or captions, and we do not build profiles of Instagram users or of our visitors.
Our data provider and Instagram
To show public Instagram information we use IGramAPI, a third-party data provider. Stories and Highlights can be fetched from a second provider, InstaGapi, when it is enabled. They receive the username or link you enter, sent by our server, not your name or account. Downloads are prepared by IGramAPI or streamed through our server from Instagram's file servers (we do not keep the files). Please read each provider's own privacy policy.
If you paste a link into the post or reel viewer, your browser may also load Instagram's embed script and the post directly from instagram.com (owned by Meta). Instagram can then receive information such as your IP address and browser details, under Meta's own privacy policy. We don't control or receive this.
AI reports
The AI Audit & Growth Report is optional. When you use it, our server sends the public information described above to an AI service provider (Google Gemini or OpenAI, whichever the site uses) to generate the text. Only public accounts can be analysed; private accounts are refused. The AI's answer is a suggestion, can be wrong or out of date, and is not advice or a promise of results. Hashtag size tiers are estimates, not live statistics. Please read the provider's own privacy policy for how it handles requests.
Cookies, consent and analytics
When you first visit, a banner asks whether we may use analytics. Until you click “Accept analytics”, Google Analytics runs in a restricted mode with consent denied and sets no analytics cookies. If you accept, Google Analytics (GA4, loaded through Google Tag Manager) sets cookies named like _ga and _ga_… and measures the events described above. You can change your mind at any time with the “Analytics choice” link in the footer, which reopens the banner, or by clearing this site's data in your browser. We do not use the data for advertising. We do not sign you in, so analytics cannot identify you by name.
Third-party content, like Instagram embeds, may set its own cookies when it loads. You can block or delete cookies in your browser settings. Visitors who are logged in as site administrators are not measured.
Advertising
The site currently shows no ads. If we add advertising in the future (for example Google AdSense), the ad provider may use cookies to show and measure ads, and we will update this policy before ads go live.
Third-party services
| Service | What it's used for |
|---|---|
| IGramAPI (data provider) | Looking up public Instagram information and preparing downloads |
| InstaGapi (data provider, when enabled) | Looking up public Stories and Highlights |
| AI provider (Google Gemini or OpenAI, when enabled) | Writing the optional AI audit, captions, hashtags and plan from public profile text |
| Google Tag Manager and Google Analytics 4 (Google) | Measuring site usage, only after you accept analytics |
| Instagram embed (instagram.com, Meta) | Displaying a pasted post or reel link, only when you use the link viewer |
| Hostinger | Hosting and delivering the website's files |
Your choices and rights
Depending on where you live, you may have rights to access, correct or delete personal information, or to object to its use. Our own code doesn't keep personal profiles, so apart from removal-request emails and our hosting provider's standard logs there is usually nothing for us to retrieve. For questions or requests, contact [CONTACT EMAIL]. For data Instagram collects, use Meta's privacy tools.
Children
This site is not directed at children under 13 (or the minimum age in your country), and we don't knowingly collect their information.
Security
Every username and link is validated on our server, requests are rate limited, and the key to our data provider stays on the server and is never sent to your browser. No method of transmission over the internet is 100% secure.
Changes to this policy
We will update this page when the way the site works changes, and change the “Last updated” date above.
Related: Terms of Service · Safety · Contact