Privacy,
in plain language.

What you choose to share

Media processing starts off. After signing in, read the disclosure in Account and choose the media-processing checkbox if you want to use previews, loading and saves. Without permission, Keepiro does not discover Instagram accounts, collect media or send Instagram media details to its service. Your email is still needed for a Keepiro sign-in you request.

With permission, Keepiro reads visible profile labels and avatars locally to position its controls and populate your account picker. It does not inspect unrelated page responses. Preview, Load and Save actions request the selected accounts or posts using your existing Instagram access. Load all processes at most 50 relevant accounts for that action. There is no unattended automatic collection. Instagram Direct, conversations, messages and inbox participant discovery are excluded.

What reaches the Keepiro service

Your requested media action sends a filtered set of media and profile-image URLs, including signed query parameters, account usernames and numeric IDs, media IDs and types, dimensions, timestamps, story counts, account ordering and pagination details and a reduced video manifest to api.keepiro.com. Cloudflare hosts this service. It prepares media data in memory and returns data, not executable code. These payloads are not written to the account database, shared caches or application logs. The browser may keep a minimal processing-result cache in memory for up to 30 seconds; it is cleared on permission or session changes. Signed URLs can grant access to content and are treated as sensitive.

Instagram passwords, cookies, session tokens, authentication headers, captions and Direct messages are excluded. Image and video file contents are not uploaded to Keepiro. Your browser requests previews, thumbnails and downloads directly from Instagram and its media CDN hosts. Those hosts receive their own connection information and requests.

Email authentication sends your email to Keepiro and to Zoho ZeptoMail for delivery of your requested code. Keepiro stores your email, an internal account ID, session-token hashes, a public browser signing key, consent version and timestamps, and preview/download allowance records. Allowance records contain opaque media hashes, not media addresses. The browser's private signing key stays on your device and is not exportable using the browser's cryptography API. Short-lived signed request identifiers reject replays. We use keyed hashes of email and connection IP for rate protection; Cloudflare receives the actual IP as the network provider.

What stays on your device

Temporary accounts, selections, media addresses and loading progress use extension session storage. They clear when you leave or close the Instagram tab, restart Chrome, sign out or withdraw media permission. Turning permission off stops pending work and clears temporary previews. Data already processed, media already delivered and files already saved cannot be recalled.

The local Library uses extension-origin IndexedDB. It keeps loaded or saved media entries, account handles, media identifiers, ordinary Instagram permalinks, thumbnails, favorites, collections and Chrome download-history IDs until you remove them, clear extension data or uninstall. It does not store signed media addresses. Removing a Library item does not delete its downloaded file. Downloaded files and Chrome or Instagram caches have their own lifecycle on your device.

Settings and the Keepiro session are kept in extension local storage restricted to trusted extension contexts. Keepiro also stores a small local request-timing record so tabs share pacing and an Instagram cooldown survives a browser restart. It contains timing values and a retry counter, with no Instagram account, media address or conversation data. It stays on this browser and can be removed by clearing extension data or uninstalling. Recently requested stories may be reused for two minutes and posts for five minutes to reduce duplicate reads; this temporary gallery data clears when media permission is withdrawn. The website stores only an appearance preference, keepiro-theme, when you choose Light or Dark. System removes that saved choice. Demo selections stay in page memory.

Retention and service providers

Cloudflare hosts the website, Worker API and D1 account database. Application request and body logging is disabled. Cloudflare can process connection, security and aggregate traffic information as part of delivering and protecting the service. No advertising analytics, marketing pixels or tracking cookies are installed by Keepiro. Website download counts describe requests, not confirmed installations or unique people.

• Sign-in codes expire after 10 minutes. Expired challenge records are removed by hourly cleanup, normally within a further hour.
• Keepiro sessions last at most 30 days. Signing out revokes the chosen session immediately; signing out all devices revokes all sessions. Expired sessions and their public keys are removed hourly.
• Replay identifiers are valid for about 10 minutes and removed after expiry by hourly cleanup. Rate-limit records expire from the active database within about 25 hours.
• Story preview and download allowance receipts, and daily aggregate usage, are retained for up to 40 days plus the hourly cleanup interval. Webhook deduplication hashes, used for existing private test operations, expire after 90 days plus that interval.
• Your active account email and consent records remain while your account exists. Account deletion removes active account, session, consent, allowance and associated billing-reference records. A keyed email hash remains for up to 31 days plus hourly cleanup to prevent allowance resets during the first 24 hours and to reapply deletion if a recovery backup is restored. You can register again after 24 hours.
• D1 automatic recovery history can retain deleted database records for up to 30 days, or 7 days on Cloudflare's Free plan. Deletion does not rewrite recovery history. We do not create separate account-database exports as part of normal operation. Restoring a backup requires reapplying deletion requests before returning it to service.
• Zoho's outgoing email delivery logs can remain for up to 60 days under its CPaaS email-log policy. Provider security and administrator audit records follow Zoho's own policies. We do not enable email open or click tracking. Your inbox retains delivered messages until you delete them.

These services may process data outside Morocco. See Cloudflare's privacy policy, D1 recovery history, Zoho's privacy policy and Zoho email-log retention. If you contact support, your email and the information you choose to send are used to resolve your request. Ask us to delete the correspondence when it is no longer needed. Do not send Instagram credentials or signed media URLs.

Your controls and deletion

In Keepiro Account, turn off media processing to stop new media work. Use Stop to cancel a load. Delete Library entries or collections in the Library. Clear browser data or uninstall to remove local extension storage. The account deletion dialog can also clear this browser's Library and signing key. It does not erase other browsers or downloaded files.

To delete your service account, sign in again, open Account, select Delete Keepiro account and type your account email to confirm within 10 minutes of signing in. If you have an existing private test subscription, cancel it before deletion. Public users have no subscription or checkout. You may instead send an access, correction or deletion request from your account email to support@keepiro.com. We verify ownership before changing account data. We cannot delete copies retained independently by Instagram or in your inbox.

Purpose, security and limited use

We use account information to provide and protect sign-in and enforce Free allowances. We use consented media details only to prepare your requested previews, saves and local Library. We do not sell personal information, use it for advertising, assess creditworthiness or transfer it to data brokers. The public release is Free. Pro is coming soon and cannot initiate checkout or transmit data to a payment provider.

Keepiro's use of user data follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Transfers are restricted to service providers needed to deliver these features, security or legal obligations, or a business transfer with the consent required by applicable policy. Human access is limited to your permission for specific support data, necessary security investigations, legal obligations, or aggregated and anonymized internal operations. HTTPS, restricted credentials, signed browser requests and server-side authorization reduce risk. No product can promise absolute security.

Instagram and your rights to content

Keepiro is independent of Instagram and Meta. It uses only content available through your current Instagram access and does not bypass login, privacy controls or security challenges. Its controls do not open Instagram's story viewer or intentionally send story-seen mutations. Instagram controls its own records, so anonymous or unrecorded access is not guaranteed. Only access and save content you are authorized to use. This policy is not permission from a content owner or from Meta.

Policy updates

We will update this page when data handling changes. A material expansion of media collection requires a new disclosure and permission in the extension before it begins. Questions and privacy requests: support@keepiro.com.