LegalPrivacy Policy
Data Protection & Privacy

Privacy Policy

Effective Date: October 2026 · Committed to zero password collection and client-first privacy

No Instagram Login

You never enter your password or grant full OAuth access to your Instagram account to use our public tools.

Client-Side Memory

Tools like Unfollowers Tracker compare JSON and CSV exports entirely in your local browser sandbox.

No Data Brokering

We never sell, rent, or trade your queries, exported CSV files, or personal information to third-party ad brokers.

1. Core Privacy Commitments

At VidLookup.com, we believe data privacy and user sovereignty should be standard across the web. Our service is intentionally architected to minimize data collection. We do not require account registration, phone verification, or Instagram login tokens for everyday public search and media extraction.

2. Information We Never Collect

To eliminate ambiguity, VidLookup.com explicitly DOES NOT collect or store:

Instagram Passwords, 2FA codes, or credentials
Private direct messages without explicit user paste input
Credit card or banking numbers on our servers
Personal phone contacts or address books

3. Information We Process

Depending on which features you use, we process minimal operational data:

  • Search Input & Target Handles: When you enter a public Instagram username or Reel/Story URL, our system queries public endpoint APIs to display the requested media or follower count. This query is handled in real-time.
  • Signal AI User Input: Text pasted into the Signal AI forensic tool is processed ephemerally in-session by our heuristic analytical pipeline to generate relationship sentiment curves. Text is not cataloged into public training databases.
  • Technical Diagnostics: Standard web server logs (anonymized IP addresses, browser user-agent, operating system, and timestamps) are kept temporarily for DDoS mitigation, rate limiting, and uptime monitoring.

4. Public Instagram Data Handling

VidLookup.com operates strictly as an intermediary interface for publicly accessible information. Public follower lists, follower counts, verified badges, biographies, and publicly posted media are indexed directly from Instagram's public endpoints.

If an Instagram user sets their profile to Private, our systems immediately return a restricted notice and will not fetch or display followers or media from that profile.

5. Cookies & Local Storage

We use minimal first-party browser storage for functional site utility:

Theme Preference (`theme`)Stores your Dark Mode / Light Mode choice locally in your browser.
LocalStorage
Session Rate Limits (`rate_limit_token`)Ephemeral token preventing bot spam and abuse.
SessionCookie

We do not use persistent cross-site tracking cookies (such as Meta Pixel or third-party behavioral advertising cookies).

6. Data Retention & Auto-Purging

Media retrieved by our downloaders (such as 1080p MP4 Reels or Story photos) is streamed directly to your browser or passed through an ephemeral proxy cache that expires automatically within 15 minutes. We do not maintain a permanent video hosting archive of user downloads.

Exported CSV files are generated on-the-fly and downloaded straight to your computer's local download folder.

7. Your GDPR & CCPA Rights

Depending on your location, you have rights under privacy frameworks such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA):

  • Right to Know / Access: You may request information on what limited operational logs exist for your IP.
  • Right to Deletion: You may request immediate removal of cached queries or logs associated with your handle.
  • Right to Opt-Out: Since we do not sell personal data, no opt-out of data sale is necessary.
  • Non-Discrimination: Exercising your privacy rights will never result in degraded service or discriminatory pricing.

8. Security Architecture

We implement industry-standard technical safeguards:

  • End-to-end 256-bit TLS/HTTPS encryption for all communication between your browser and our servers.
  • Automated firewall mitigations against brute-force crawlers and scraping flooding.
  • Strict server isolation with minimal open ports and zero permanent user database storage.

9. Third-Party Services

Our infrastructure utilizes high-performance hosting providers (such as Cloudflare, AWS, or Vercel edge networks) for CDN caching and DDoS resilience. These providers process IP requests strictly to deliver web assets in accordance with their standard enterprise privacy guarantees.

10. Data Protection Inquiries

To exercise your privacy rights, request profile cache purges, or consult our Data Protection Officer (DPO):

[email protected]