Privacy Policy

Grabfy is built on a simple privacy principle: we collect as little as possible and store nothing about your downloads.

What we collect

• Server logs — Standard Cloudflare edge logs (IP address, request path, timestamp) are retained for up to 24 hours for abuse prevention and then deleted automatically. We do not log the Instagram URLs you paste.
• Theme preference — Your light/dark mode choice is stored in your browser's localStorage. It never leaves your device.

What we do NOT collect

• The Instagram URLs you paste into Grabfy
• The files you download
• Your Instagram account or credentials (we never ask for them)
• Cookies for tracking or advertising
• Any personally identifiable information

How downloads work

When you paste a link, our server fetches the media URL from Instagram's public CDN and returns a direct download link to your browser. The file travels from Instagram's servers to your device — it does not pass through or get stored on Grabfy's servers.

Third-party services

Cloudflare — Grabfy is hosted on Cloudflare Pages and uses Cloudflare's edge network. Cloudflare may process your IP address in accordance with their privacy policy.

Google Fonts — We load the Inter typeface from Google Fonts. Google may log font requests per their privacy policy. No other Google services are used.

Your rights (GDPR)

If you are in the European Union, you have the right to access, correct, or delete any personal data we hold. Because we store virtually nothing, there is typically nothing to request — but you can contact us if you have questions.

Changes to this policy

We will update this page if our practices change. The "last updated" date at the top will reflect any changes.

Contact

Email: [email protected]