ccpa / cpra opt-out

Do Not Sell My Personal Information

Your California privacy rights, plainly stated. Instapdown does not sell personal information. This page confirms that and how to exercise your rights if you believe otherwise.

Short answer: Instapdown does not sell or share your personal information with third parties for cross-context behavioural advertising, as those terms are defined by the CCPA (Cal. Civ. Code § 1798.140) and CPRA. No opt-out is required because no sale or sharing occurs by default.

What Instapdown collects

When you use one of our tools we process the minimum data required for the tool to function — usually the public Instagram URL you paste and a session ID for rate limiting. If you opted into analytics via our cookie banner we also collect aggregated, non-identifying usage data through Google Analytics 4 (with IP anonymisation) and Vercel Analytics (cookieless).

We do not require you to sign up. We do not store the URLs you download. We do not build behavioural profiles.

Why "we don't sell" is technically accurate

Under CCPA § 1798.140(t), "sell" means disclosing personal information to a third party for monetary or other valuable consideration. Instapdown's only third-party data flows are (a) hosting and infrastructure providers processing data strictly to deliver the service, and (b) opt-in analytics you can decline via the cookie banner. None of these involve selling data.

Under CPRA (effective January 2023) the definition of "share" adds cross-context behavioural advertising. Instapdown does not run behavioural advertising and does not share personal information for that purpose.

Your California rights

Even without a sale or share, California residents can exercise the following rights at any time:

Right to know — what personal information we hold about you.
Right to delete — request deletion of that information.
Right to correct — request correction of inaccurate data.
Right to opt out — direct us not to sell or share your data (already the default).
Right to limit — restrict use of sensitive personal information.
Right to non-discrimination — no service degradation for exercising rights.

How to exercise your rights

Email privacy@instapdown.com from the address associated with any signup (if applicable) with the subject line "CCPA request — [know | delete | correct | limit]". We respond within 45 days as required by law, extendable once by 45 days with notice.

If you would like an authorised agent to submit a request on your behalf, include a copy of the signed authorisation. If you appeal a decision, email privacy@instapdown.com with "CCPA appeal" in the subject.

Global Privacy Control (GPC)

Instapdown recognises the GPC browser signal. When your browser sends the GPC header, we treat it as a verified opt-out request under CCPA § 999.315(c)(1) even though, as noted above, we do not sell or share information by default.

See our Privacy Policy, Cookie Policy, and Editorial Standards for the full picture of how Instapdown handles data.