Privacy
InsFetch counts visits on its own server. Production also offers an optional Google Analytics 4 measurement that follows the region rules below. The statistics store leaves out the items listed on this page.
What is counted
Each page view is stored as a count and classified as a person or a bot. A human page view also stores a coarse device, operating system, and browser class, such as phone, ios, or chrome. A bot page view leaves those three fields empty. Rows that are not from a person have a daily limit. Resolve and download events are counted by outcome code only. The raw user-agent string is not stored.
What the statistics store does not keep
- Your IP address.
- The raw user-agent string. The page view is still classified as a person or a bot.
- A visitor cookie. The site's own counts do not use one.
- The link you paste, or the shortcode inside it.
Repeat visits on the same Beijing day are counted with a short hash. The hash mixes a salt for that day with the client address and the user-agent. The salt is removed when the day changes. The address and the user-agent are not stored. The site's own counts are not sent to an ad network, and they are not shared with any other product.
Optional Google Analytics 4
When the operator enables it, the production site at https://insfetch.com can load Google Analytics 4. It never loads in preview, on API, health, robots, sitemap or error responses, or for any other host. The measurement is Google's, so Google receives the request and connection information such as your IP address, and can set its own pseudonymous cookie.
Region rules: in the European Economic Area, the United Kingdom, Switzerland and any unknown or unrecognised region, the measurement stays off until you choose Allow in the footer settings. In other recognised regions it is on by default and the same footer lets you opt out. If this browser blocks storage, the measurement stays off. No window opens by itself and nothing is blocked while you decide. Do Not Track and Global Privacy Control always win: with either signal the measurement does not load and any earlier choice is ignored. Declining or withdrawing stops further collection and removes this site's Google cookies. Your choice is kept in this browser for up to 180 days.
What the measurement can receive: the page address without its query string or fragment, a fixed page name, the origin of the referring site, and the browser, device and approximate region information Google normally derives from a request. What it never receives from this site: the link you paste, the shortcode, the resolved media address, file names, captions, or any account detail. Advertising storage and ad personalisation are always denied, and this site's Google measurement is configured with Google Signals and enhanced measurement off and user and event data retention at 2 months.
How a file is fetched
The preferred download is your browser fetching the file from the Instagram CDN. That request is visible to Instagram and to Meta. A measured browser check saved a public file that way. The page does not show you a separate CDN address to copy.
Logs and how long counts stay
This application does not write an access log. The web server log records the time, method, route class, status, size, duration, upstream status, and the Cloudflare request identifier (CF-Ray) of the request. It does not record the client address, the raw user-agent, the Referer, or the query string. Raw event rows older than the Beijing day 13 days before today are deleted, which leaves 14 Beijing days. Daily totals older than the Beijing day 89 days before today are deleted, which leaves 90 days. The app journal is kept for 14 days and is not copied to syslog.
Application logs replace a token, a pasted url, a src value, a back value, and an Instagram CDN address with the word redacted, including text inside an exception. After this site is launched, website management will copy daily totals only. That export is not running yet, so it is not a second copy of the raw rows.
Links you paste
The lookup uses the link to find a public post. Error text does not echo that link. When the short-lived download link expires, paste the post again if you still want the file. The old link is not kept as an account history, because there is no account.
Questions
Do you sell visit data?
No. The site's own counts are not sold, and the optional Google Analytics 4 measurement has ads and ad personalisation switched off. The privacy page lists what each counts and which controls apply.
Does the site use cookies?
The site's own statistics use no cookie. The optional Google Analytics 4 measurement can set a pseudonymous cookie for up to 180 days, and only after your region allows it by default or you choose Allow in the footer. DNT, GPC, a decline or a withdrawal keeps it from loading, and withdrawing removes this site's Google cookies.
Can I see the link I pasted last week?
No. The pasted link and the shortcode are not kept in the statistics store, and there is no account history to open.