Skip to content

Privacy policy

What happens to your photos, your Instagram lookups and the data used by analytics and ads.

Who we are and what this policy covers

This website, https://insta-editor.com, is operated by Insta-Editor (insta-editor.com), referred to below as "Insta-Editor", "we" or "us". Insta-Editor is an independent site and does not publish a postal address. You can reach us about anything in this policy through the contact form.

This policy explains what information is processed when you visit the site and use its tools, who processes it, and what choices you have. It applies to insta-editor.com and all its language versions. The terms and conditions are on a separate page. Insta-Editor is an independent tool and is not affiliated with, endorsed or sponsored by Instagram or Meta.

Photos and videos you edit stay on your device

The photo editor, the design tools, the text tools and the video and audio converters run entirely inside your web browser. When you open a photo or video, your browser reads it locally, processes it locally and saves the result through its normal download or share function. Files you edit are never uploaded to Insta-Editor or to anyone else: we do not receive, store, view or share them. The page downloads only program code, fonts, templates and similar assets from our server.

The same applies to text you type into the font, caption and hashtag tools, and to numbers you enter in the engagement calculator's manual mode: they are processed in your browser and are not sent to us.

Instagram lookups

Some tools show public information from Instagram: the viewers, downloaders, story tools, follower and likes checkers, analytics, audit, fake follower check, mutual following, the username availability check, the username mode of the engagement calculator, and the link modes of Instagram to MP4 and Instagram to MP3. When you use them, this is what happens:

  • Your browser sends the username or Instagram link you entered to our server.
  • Our server asks HikerAPI, a third-party data provider, for the public information about that account or post, and returns it to your browser. We never ask for your Instagram login, and the tools do not use any Instagram account of yours.
  • Answers are kept in a short-lived cache on our server so that repeated lookups are fast and the service stays affordable: stories for 5 minutes, profiles for 30 minutes, posts, Reels and media details for 60 minutes, highlights for 6 hours, username checks, follower samples and following lists for 24 hours. "Not found" and similar answers are kept for 30 minutes. After that, the cached entries are deleted or replaced.
  • Photos and videos you download are passed from Instagram's servers through our server to your browser. They are not stored on our server.
  • The lookup service writes one log line per request to the data provider, with the date, the type of request, whether the cache was used, the response time and whether it succeeded. This log does not contain the username or link you entered, or your IP address.

The information returned is information that the account has made public on Instagram. We do not combine lookups into profiles of the people searched, and we do not keep a history of who searched for whom.

Abuse protection and rate limits

To keep the lookup tools free and to stop automated abuse, our server limits how many lookups each visitor can make per hour and per day. For this it stores a keyed hash of your IP address, not the address itself, together with a counter. These rate-limit records are deleted after 48 hours at the latest. When you open a tool, your browser also receives a short-lived technical token that is required for lookups and expires after a short time.

If you press the "I have a problem" button on the Instagram status page, we add one to a counter for the current ten minutes. To allow one report per visitor every ten minutes, it uses the same kind of keyed-hash rate-limit record; nothing else about you is stored with it.

Information stored on your device

The site stores a few things in your browser's local storage so that it can remember them on your next visit: your choice of light or dark theme, tool settings, your favorite font styles, your recent searches in the Instagram tools, the numbers you saved with the follower tracker, the sound setting of the story player, whether you already reported a problem on the Instagram status page in the last ten minutes, and whether you have dismissed the suggestion to switch to another language. To make that suggestion, the page compares the languages set in your browser with the languages of the site; this happens on your device.

This data stays on your device. It is not sent to our server and we cannot see it. You can clear recent searches in the tools, or delete everything by clearing the site data for insta-editor.com in your browser settings.

Google Analytics

We use Google Analytics (measurement ID G-BB15BX3ZKH), a service of Google, to understand how many people visit the site, which pages they open and how the tools are used. The Google Analytics script loads on every page of the site.

Google Analytics sets first-party cookies and collects information such as the pages you visit, the time of your visit, the page that referred you, your browser and device type, screen size, language and an approximate location derived from your IP address. The tools also send a few events: that a tool was opened, that a file was added, that a result was exported (with the format and the file size as a rough range), that a lookup was made (with its kind and whether it worked), that something was downloaded or copied, and that an error occurred (with an error code). These events never contain file names, file contents, usernames or links.

We use these reports in aggregate to improve the site and the tools, not to identify individual visitors. Learn how Google uses this data in How Google uses information from sites or apps that use its services (opens in a new tab). To stop Google Analytics from collecting data in your browser on all websites, install the Google Analytics opt-out browser add-on (opens in a new tab), or block analytics cookies in your browser settings.

Advertising

The site is free and financed by advertising. Ads are delivered by Ezoic Inc. and its advertising partners and by Google AdSense. They appear around the content of the pages and never inside the tool area. Advertising partners may set cookies and use similar technologies to show ads, to measure them, to limit how often you see the same ad and, where allowed, to show ads based on your interests.

Ezoic services

This website uses the services of Ezoic Inc. ("Ezoic"), including to manage third-party interest-based advertising. Ezoic may employ a variety of technologies on this website, including tools to serve content, display advertisements and enable advertising to visitors of this website, which may utilize first-party and third-party cookies.

A cookie is a small text file sent to your device by a web server that enables the website to remember information about your browsing activity. First-party cookies are created by the site you are visiting, while third-party cookies are set by domains other than the one you are visiting. Ezoic and our partners may place third-party cookies, tags, beacons, pixels and similar technologies to monitor interactions with advertisements and optimize ad targeting. Please note that disabling cookies may limit access to certain content and features on the website, and rejecting cookies does not eliminate advertisements but will result in non-personalized advertising.

The following information may be collected, used and stored in a cookie when serving personalized ads:

  • IP address
  • Operating system type and version
  • Device type
  • Language preferences
  • Web browser type
  • Email (in a hashed or encrypted form)

Ezoic and its partners may use this data in combination with information that has been independently collected to deliver targeted advertisements across various platforms and websites. Ezoic's partners may also gather additional data, such as unique IDs, advertising IDs, geolocation data, usage data, device information, traffic data, referral sources and interactions between users and websites or advertisements, to create audience segments for targeted advertising across different devices, browsers and apps.

You can read Ezoic's own privacy policy (opens in a new tab) and the list of Ezoic's advertising partners (opens in a new tab). The partners and their privacy policies for this site are also listed at the end of this page.

Google AdSense

Google, as a third-party vendor, uses cookies to serve ads on this site. Google's advertising cookies enable it and its partners to serve ads based on your visits to this site and other sites on the internet. You can learn how Google uses information from advertising in Google's advertising policies (opens in a new tab), and you can turn off personalized advertising from Google in My Ad Center (opens in a new tab).

The consent banner and your choices

Where the law requires it, for example in the European Economic Area, the United Kingdom and Switzerland, the site shows a consent banner from Ezoic's consent management platform (Gatekeeper) before personalized ads are served. There you can accept or reject cookies and choose which purposes and partners you allow. These choices apply to advertising. They do not switch off Google Analytics, which loads on every page.

You can change your choice at any time by clearing the cookies and site data for insta-editor.com in your browser; the banner then appears again on your next visit. You can also block or delete cookies in your browser settings, use the Google Analytics opt-out add-on and My Ad Center linked above, and use industry opt-out pages such as those linked from Ezoic's privacy policy.

The contact form

If you send us a message through the contact form, we receive what you type into it: the message, the optional subject and, if you enter one, your email address, together with any screenshots you choose to attach. A small anti-spam check runs in your browser before the message is sent. The form is handled by a feedback service that delivers the messages to us. We use your message only to answer you and to fix the problem you reported, and we do not add you to any mailing list.

Server logs

Like almost every website, our web server records basic technical information about each request, such as the IP address, the date and time, the address requested, the referring page and the browser's user agent. For Instagram lookups, the address requested can include the username or link you entered. These logs are used to keep the site secure and running and to find technical errors, are kept for a limited time and then deleted, and are not used for advertising. They never contain the photos and videos you edit, because those are never sent to the server.

Security

The site is served only over an encrypted HTTPS connection. No method of transmission over the internet or of electronic storage is completely secure, but the safest data is data we never receive: that is why your photos and videos are edited on your device.

Sharing and international processing

We do not sell personal information ourselves and we do not share contact form messages with third parties, except with the service that delivers them to us or where the law requires it. The usernames and links you enter for lookups are passed to our data provider, HikerAPI, only to fetch the public information you asked for. Under some US state privacy laws, the use of advertising cookies by our ad partners may count as "selling" or "sharing" personal information; you can limit it with the consent banner where it is shown, the tools linked above and your browser settings. Google, Ezoic, HikerAPI and their partners may process data in the United States and other countries.

When you use a share button, the site opens the service you chose (Facebook, X, WhatsApp, Telegram, Reddit or Pinterest) with a prepared message, or copies the link to your clipboard. What happens on that service is governed by its own privacy policy. Links to other websites, including Instagram, are likewise subject to the policies of those sites.

How long data is kept

Settings, recent searches and tracker numbers in your browser's local storage stay until you delete them. Cached lookup answers are kept for the times listed above, from 5 minutes to 24 hours. Rate-limit records are deleted after 48 hours at the latest. Contact form messages are kept only as long as we need them to answer you and to fix the problem you reported, and we delete them earlier if you ask. Server logs are kept for a limited time for security and then deleted. Google Analytics, Ezoic, Google AdSense and their partners keep the data they collect according to their own policies.

Your rights

Depending on where you live, you may have the right to access, correct or delete personal information about you, to object to or restrict certain processing, to withdraw consent, to opt out of the sale or sharing of personal information or of targeted advertising, and to complain to a data protection authority. Because we have no accounts or user profiles and never receive the files you edit, most of the data related to your visit is held by your browser or by the services named above. You can use the consent banner, the opt-out tools linked on this page and your browser settings, and you can send us any request through the contact form. We will answer within the time required by the law that applies to you.

If you run a public Instagram account and want it to stop appearing in our tools, the most effective step is to make the account private on Instagram; our tools then show only the public header that Instagram shows to everyone. You can also contact us through the form.

Children

The site is a general-audience utility and is not directed at children. It does not ask anyone for personal information in order to use the tools. We do not knowingly collect personal information from children under 13 (or the higher age set by the law in your country). If you believe a child has sent us personal information, for example through the contact form, tell us and we will delete it.

Changes to this policy

We may update this policy when the site, its tools or the services we use change. The date below shows when it was last revised, and the current version is always published on this page. Your continued use of the site after a change means that the updated policy applies.

Last updated: November 2026.