Privacy Policy

This policy describes how SaveStories Media (“SaveStories”, “we”) treats information connected to visitors of savestories.app. It covers the website, the result pages for individual usernames, and the files your browser downloads through them. It does not cover Instagram itself: anything you do on Instagram is subject to Meta’s own terms and policies, and we have no access to your Instagram account.

SaveStories has no sign-up, no user accounts and no newsletter. Most of this document therefore describes what we don’t hold, and the small amount we do.

Usernames you look up. When you submit a username, it is sent to our lookup service so that the public stories and highlights for that account can be listed. The request includes a short-lived verification token from Cloudflare Turnstile (see section 4) that proves the request came from a browser. Usernames are handled as part of the request and appear in standard server logs for a limited period; they are not linked to you as a person, and we do not build histories of who looked up whom.

Media files. Previews and downloads are fetched by your browser directly from the content delivery endpoint. When you use “Save all”, the ZIP archive is assembled inside your browser and never uploaded to us.

Technical data. Like any website, our servers and our hosting provider receive your IP address, user agent, the pages requested, referrer and timestamps. We use this for capacity planning, abuse prevention and diagnosing errors. Logs are rotated and are not sold or shared for marketing.

Theme preference. If you switch to dark mode, the choice is stored in your browser’s local storage under the key theme. It never leaves your device.

• Your Instagram credentials, session cookies or access tokens — we never ask for them and cannot use them.
• A copy of the stories, highlights or profile pictures you download.
• Your name, email address or payment details (there is nothing to pay for).
• Cross-site profiles of your behaviour built by us. Third-party scripts listed below have their own practices.

The following services run on savestories.app. Each has its own privacy policy, linked from its site.

• Cloudflare — proxies and protects the site, and provides the Turnstile verification widget that runs invisibly when you submit a lookup. Cloudflare may set cookies needed for bot detection.
• Google AdSense — serves the advertisements that fund the site. Google may use cookies and device identifiers to show ads based on your visits to this and other websites. You can adjust ad personalisation in your Google account settings or opt out through the Digital Advertising Alliance and similar programmes.
• Google Analytics 4 and Microsoft Clarity — measure how pages are used (page views, clicks on save buttons, where visitors come from) so we can improve the site. IP addresses are truncated or anonymised by these services where the option exists. Clarity may record anonymised interaction patterns; it does not capture text typed into the lookup field.
• Unsplash — hosts the illustrative photographs on blog pages. Loading those images sends a standard image request to Unsplash’s servers.

SaveStories itself sets no cookies. The only first-party storage is the theme preference described above. Cookies you may see on the domain are set by the third parties in section 4 for security, advertising and analytics. You can block or delete them in your browser; the lookup and download features keep working with cookies disabled, although Turnstile may ask you to complete a visible check instead.

Where the GDPR or UK GDPR applies, we rely on legitimate interest (Article 6(1)(f)) for the technical data and server logs needed to run, secure and improve the service, and on your consent for advertising and analytics cookies where consent is required in your region. Server logs are kept for no longer than 30 days unless an incident requires a longer hold. Aggregated statistics that cannot identify anyone may be kept indefinitely.

Depending on where you live, you may have the right to access, correct, delete or restrict personal data about you, to object to processing, and to lodge a complaint with a supervisory authority. Because we hold so little, most requests end with us confirming that nothing identifiable is stored. If you believe we do hold something about you, write to the address in section 9 and include enough detail for us to find it.

SaveStories displays only content that an Instagram account has made public, fetched at the moment a visitor asks for it; nothing is stored on our side. If you are the owner of an account and would prefer it not to be looked up through this site, contact us with the username and we will block it. Rights holders who believe a specific item infringes their copyright can send a notice with the item’s URL and proof of ownership.

We may update this policy when the service or the law changes; the date at the top reflects the latest revision, and material changes will be noted on this page. Questions, deletion or blocking requests go to [email protected]. SaveStories Media is the operator and the data controller for the processing described here.