Privacy Policy
The short version: saving single posts needs no account at all. The photos and videos you download never pass through our servers — they go straight from Instagram's servers to your own computer. If you sign in for bulk downloads, we store your email address and the limited account usage needed to operate that feature. We also receive anonymous aggregate operational counters, without URLs, usernames, post identifiers, media, or a persistent user identifier.
1. Who we are
Ajiu ("the Extension") is a Chrome browser extension that saves photos and videos from posts you can already view, to your own computer, at original quality. This policy explains what data we handle and why.
2. What we collect
| Data | Why | Where it is stored |
|---|---|---|
| Your email address | To identify your account so you can sign in and keep your plan across devices | Supabase (Singapore) |
| A randomly generated account identifier | Internal key linking your account to its download counter | Supabase (Singapore) |
| Bulk-download usage and plan status | To operate the free bulk limit and, if you subscribe, your paid entitlement | Supabase (Singapore) |
| Anonymous aggregate operational counters | To measure installations, popup opens, download attempts, error categories, thumbnail fallback counts, and the media type (photo / video / mixed) and item-count range of what you save, so we can keep the Extension reliable and understand which features are used | Supabase (Singapore), aggregated by hour and Extension version without a user ID |
| Optional welcome survey answer (from version 0.13.8) | Only when you click an answer: your chosen category, not the content you download. Participation is optional and skipping does not affect any feature. | Supabase (Singapore), aggregated by hour and Extension version; no account or device identifier. Only a completion flag is stored locally to avoid asking again. |
| Your settings (save folder, ZIP option, language) | To remember your preferences | Only in your browser (chrome.storage.local) — never sent to us |
| Your sign-in session token | To keep you signed in | Only in your browser (chrome.storage.local) |
3. What we explicitly do NOT collect
- The photos and videos you download. They are fetched directly from Instagram's content servers by your browser and written to your computer. They never reach any server of ours.
- Which accounts or posts you view or download. We do not log URLs, usernames, or post identifiers, and the media files themselves never reach our servers. Our servers receive only anonymous category counts — for example “a photo post with 2–9 items was saved” — which cannot be traced back to a specific post or person.
- Your browsing history on Instagram or anywhere else.
- Your Instagram credentials. The Extension never asks for, sees, or stores your Instagram username or password. It works using the session you are already signed into in your own browser.
- Your IP address is not recorded by us for analytics or profiling.
- We do not use advertising, tracking pixels, device fingerprinting, or third-party analytics in the Extension.
Website analytics
Website analytics (separate from the Extension): When enabled on ajiuai.com, Cloudflare Web Analytics measures visits, referring sites, page paths, country-level traffic, browser/device categories and page-load performance. This does not measure what you view or download on Instagram and is not linked to your Ajiu account or survey answer. Cloudflare describes this service as cookie-free and without cross-site tracking; query strings are not logged. Hosting and security services may separately process connection information needed to serve and protect the site. See Cloudflare Web Analytics and its data limitations.
4. Signing in with Google
If you choose "Sign in with Google", Google shares your email address and basic profile information with us so we can create your account. We do not request access to your Gmail, Drive, Contacts, or any other Google service.
Limited Use disclosure: our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not sell this data, do not use it for advertising, and do not allow humans to read it except where required for security, to comply with the law, or with your explicit consent.
5. Service providers we use
- Supabase — hosts our database and handles authentication. Data is stored in their Singapore region.
- Google — only if you choose to sign in with a Google account.
- Resend — delivers the sign-in code email if you sign in with email.
We do not sell, rent, or trade your personal data to anyone, and we do not share it with third parties for their own marketing purposes.
6. Browser permissions and why they are needed
| Permission | Reason |
|---|---|
downloads | To save files to your Downloads folder |
storage | To remember your settings and keep you signed in |
identity | To perform the Google sign-in flow |
Access to instagram.com and its content servers | To place the download button on the page you are viewing, read the media addresses of the post you chose, and fetch those files at full quality |
Access to supabase.co | To sign in, check bulk-download usage, retrieve safety-validated configuration, and submit anonymous aggregate operational counters |
7. How long we keep data
Your account record is kept while your account exists. Usage counters are used for service controls and are not retained as a history of the content you downloaded. If you delete your account, your record is removed from our database.
8. Your rights
You can ask us to access, correct, export, or delete your data at any time by emailing wqc1162@gmail.com. Because we hold so little — essentially an email address and a number — deletion is straightforward and we will action it within 30 days.
Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA, including the right to object to processing and to lodge a complaint with a supervisory authority.
9. Children
The Extension is not directed at children under 13, and we do not knowingly collect data from them.
10. Relationship with Instagram
Ajiu is an independent tool. It is not affiliated with, endorsed by, or sponsored by Instagram or Meta Platforms, Inc. You are responsible for ensuring your use of downloaded content complies with Instagram's terms and with applicable copyright law.
11. Changes to this policy
If we change this policy we will update the date at the top of this page. Material changes will also be announced in the extension.
12. Contact
Questions about this policy: wqc1162@gmail.com