Privacy Policy

This policy describes how StoriesIG handles information when you use the public-content lookup service at storiesig.xyz. It covers server and hosting logs, provider requests, caching, contact form submissions, cookies, analytics, and data retention. It does not describe Instagram's or Meta's own privacy practices.

StoriesIG does not claim to process zero data. Any request to a web server involves technical data handling. This policy aims to describe that handling accurately.

StoriesIG does not collect, store, or transmit Instagram passwords, authentication codes, session tokens, or any other Instagram account credential. If you are ever asked for these on any page of this site, do not provide them and contact us immediately.

When you submit a username lookup, the request is sent to StoriesIG's server, which validates and normalises the username, then passes it to the configured public-content provider. The normalised username and limited technical information — your IP address, browser type, request timestamp — may be processed by hosting infrastructure and the provider to return results.

StoriesIG aims to minimise retention. Searched usernames are not intentionally sent to third-party analytics services. Short-lived server-side caching may retain a normalised response for a limited period to reduce unnecessary repeated provider requests.

Standard web-server and hosting infrastructure logs are created automatically for security, performance monitoring, and abuse prevention. These logs may include IP addresses, request paths, timestamps, HTTP status codes, and browser user-agent strings. Logs are retained for a limited period according to the hosting provider's standard practices and are not sold or shared with third parties for advertising purposes.

StoriesIG does not intentionally deploy third-party advertising trackers or behaviour-profiling cookies. Session-level browser storage may be used for functional purposes such as maintaining interface state. If analytics are added in the future, this policy will be updated before deployment.

When you use the contact form, the information you submit — name, email address, subject, and message — is used to respond to your enquiry. This information is retained for a reasonable period necessary to handle the request and any follow-up, then deleted. It is not used for marketing or shared with third parties except where necessary to handle the specific request (for example, a copyright removal matter).

StoriesIG retrieves publicly accessible content on behalf of users. It does not store copies of Instagram media on its own servers beyond any short-lived caching described above. Content served to users comes from the provider and ultimately from Instagram's own infrastructure. Media remains the property of its creators.

StoriesIG is not directed at children under 13. If you believe a child has submitted a contact form, contact us for deletion.

Depending on your location, you may have rights to access, correct, or request deletion of personal data held about you. To exercise these rights, use the contact form and select the privacy category. We may need to verify your identity or authority before fulfilling a request.

This policy may be updated to reflect changes in the service or applicable law. Material changes will be noted with a revised review date at the top of the page.

For privacy questions or requests, use the contact form and choose the privacy category. StoriesIG is independent and is not affiliated with, endorsed by, or sponsored by Instagram or Meta.