PRIVACY POLICY FOR INSTALISTSCRAPER

Last Updated: November 2024

INTRODUCTION

InstaListScraper ("we", "our", or "the extension") is committed to protecting your privacy. This Privacy Policy explains how we handle data when you use our Chrome extension.

DATA COLLECTION

We do NOT collect any personal data.

- No user accounts or registration required
- No analytics or tracking
- No data sent to external servers
- No third-party services
- No cookies or tracking pixels

DATA STORAGE

All data is stored locally in your browser:

- Scraped Instagram data is stored in Chrome's local storage
- Settings and preferences are stored locally
- All data remains on your device
- You can delete all data at any time from the Options page

PERMISSIONS EXPLAINED

1. STORAGE PERMISSION

Purpose: To save scraped data and settings locally in your browser
Data: Only data you explicitly scrape through the extension
Location: Stored locally on your device, never transmitted

The storage permission is essential for the extension's core functionality. It allows the extension to temporarily store scraped Instagram follower/following data so you can view, manage, and export it. All data is stored exclusively on your local device using Chrome's chrome.storage.local API. No data is transmitted to external servers, cloud services, or third-party platforms.

2. ACTIVETAB PERMISSION

Purpose: To access Instagram pages when you click the extension icon
Usage: Only when you actively use the extension
Scope: Limited to the active Instagram tab

The activeTab permission is required to access Instagram pages when you click the extension icon. This permission allows the extension to detect when you are on an Instagram profile page, read the page URL to extract the profile username, and make GraphQL API requests using your existing browser session cookies. The permission is only used when you explicitly activate the extension by clicking its icon. It does not run automatically in the background or access tabs without your interaction.

3. HOST PERMISSION (*://*.instagram.com/*)

Purpose: To make API requests to Instagram's GraphQL endpoints
Usage: Required for the extension to function
Method: Uses your existing Instagram session cookies (same as browsing Instagram normally)

The host permission for "*://*.instagram.com/*" is absolutely necessary for the extension's core functionality. InstaListScraper uses Instagram's official GraphQL API endpoints to fetch follower and following lists. Specifically, the extension makes GET requests to https://www.instagram.com/graphql/query/. These API requests are made using your existing Instagram session cookies (the same cookies used when browsing Instagram normally), which requires access to Instagram's domain. The extension does not access any other domains or make requests to third-party servers. All API requests are made directly to Instagram's servers using your authenticated session.

HOW WE USE DATA

The extension only uses data to:

1. Display scraped results in the extension interface
2. Allow you to export data in CSV/JSON format
3. Remember your settings and preferences

We do NOT:

- Share data with third parties
- Use data for advertising
- Analyze or process data externally
- Store data on external servers
- Collect analytics or usage statistics
- Track user behavior

DATA EXPORT

When you export data:

- Export happens entirely client-side in your browser
- Files are downloaded directly to your computer
- No data is transmitted during export
- You have full control over exported files
- Export functionality runs entirely locally

THIRD-PARTY SERVICES

We do not use any third-party services:

- No analytics platforms (Google Analytics, etc.)
- No cloud storage services
- No external APIs (except Instagram's own API)
- No advertising networks
- No payment processors
- No user authentication services

INSTAGRAM API USAGE

The extension uses Instagram's GraphQL API:

- Uses your existing browser session (same cookies as when you browse Instagram)
- Makes requests directly to Instagram servers
- No intermediate servers or proxies
- Subject to Instagram's own privacy policies and terms
- All requests appear as normal browser activity

YOUR RIGHTS

You have complete control over your data:

- View Data: Access all stored data from the Options page
- Delete Data: Clear all data at any time through the Options page
- Export Data: Export your data in CSV or JSON format
- Uninstall: Removing the extension deletes all stored data automatically

CHILDREN'S PRIVACY

This extension is not intended for users under 13 years of age. We do not knowingly collect data from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

DATA SECURITY

- All data is stored locally in your browser
- No data transmission over the internet (except to Instagram's API)
- No external data storage
- Chrome's built-in security features protect stored data
- Extension follows Chrome Web Store security best practices

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will be reflected in the extension's version history and this document. We encourage you to review this Privacy Policy periodically.

CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or the extension's data practices, please contact us through:

- Extension's Options page
- Chrome Web Store listing (if available)
- GitHub repository (if open source)

COMPLIANCE

This extension:

- Complies with Chrome Web Store Developer Program Policies
- Respects user privacy rights
- Uses minimal required permissions
- Stores data locally only
- Does not collect or transmit personal information
- Follows privacy best practices

DISCLAIMER

This extension is not affiliated with, endorsed by, or connected to Instagram, Meta, or Facebook. It is an independent tool developed for educational and personal use purposes. Users are responsible for complying with Instagram's Terms of Service and applicable laws when using this extension. The extension is provided "as-is" without any warranties.

LEGAL BASIS

This Privacy Policy is provided to comply with:
- Chrome Web Store Developer Program Policies
- General Data Protection Regulation (GDPR) principles
- California Consumer Privacy Act (CCPA) principles
- Other applicable privacy laws and regulations

By using this extension, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with this policy, please do not use the extension.

---

END OF PRIVACY POLICY