Privacy Policy

The short version

Unfollowly was designed so that we cannot see your Instagram data. The file you upload is processed entirely by your browser, on your device. It is never transmitted to our servers, and we have no database of user data. This page exists mostly to explain how little we collect.

1. Your Instagram export file

When you analyze your Instagram data export, the parsing and analysis run as JavaScript in your browser tab. The file contents — your followers, following, and related lists — never leave your device. We do not receive, store, log, or have any technical ability to access them.

If you use the history feature (Year Pass or Lifetime), snapshots of your follower lists are stored in your browser’s local storage (IndexedDB) on your device only. They are not synced anywhere. Clearing your browser’s site data deletes them permanently.

2. What we do process

• Unlock codes: when you activate a purchase, your browser sends the unlock code (and only the code) to our server to verify its signature. We do not store it.
• Payment information: payments are processed by Creem, our merchant of record. Creem collects your email address, payment details, billing country and the amount under its own privacy policy (creem.io/privacy); we never see your card number. Creem shares your email address and order id with us so we can deliver your unlock code and handle support or refunds. Nothing from your data export is ever sent to Creem or to us.
• Server logs: our hosting provider (Vercel) keeps standard, short-lived technical logs (IP address, requested URL) for security and operations, as virtually every website does.
• Analytics: we use Vercel Web Analytics for privacy-respecting, cookieless measurement (aggregate page views only). It sets no cookies, builds no cross-site profiles, and adds no advertising trackers of any kind.
• Advertising (blog only): our blog may show Google AdSense ads to help keep the tool free. Ads load only if you accept them via the blog’s consent banner, and may then set advertising cookies. The tool at /app is always ad-free — enforced technically: a strict Content-Security-Policy blocks any third-party ad network everywhere except the blog.

3. Cookies

We set no advertising or tracking cookies on the tool. On the blog, advertising cookies are set only if you accept ads via the consent banner. The site otherwise uses your browser’s local storage for strictly functional purposes: remembering your unlock code activation, your checklist progress, and your locally-saved history. See the cookie policy for details.

4. Your rights (GDPR)

Under the GDPR you have rights of access, rectification, erasure, portability, and objection. Because we hold almost nothing about you, exercising them is simple: the only personal data we may hold is your email correspondence about a purchase. Email support@unfollowly.app and we will act on your request. Data stored on your device is under your direct control — clear the site’s data in your browser to remove it.

5. Who we are

The data controller is Lorenzo Acri, Italy, operating Unfollowly as an independent project. Contact: support@unfollowly.app. Unfollowly is not affiliated with, endorsed by, or sponsored by Instagram or Meta Platforms, Inc.

6. Changes

If we ever change how data is handled — for example, adding optional sync or advertising — this policy will be updated first, and the change will be clearly announced on the site before it takes effect.