OwlGlance (OwlGlance, “we”) shows public Instagram content and helps you understand your own Instagram account. We collect as little as we can: no Instagram password, no ad trackers, and nothing is sold. This page explains exactly what we keep and why.
1. What we collect
If you just use the free tools
- A random visitor ID in a cookie, so we can count your free lookups. It isn't linked to your name.
- Which public accounts or posts you looked up, counted against that ID and a short one-way code of your network address (we never store the address itself). This is how the daily free limit works.
- A human-check pass: Cloudflare Turnstile checks you aren't a bot, and we keep a signed pass for 30 minutes.
If you create an account
- Your email address, used to sign you in with a one-time link (no password) and to send the emails you ask for.
- Accounts you track, and whether you switched on story alerts for them.
- Your plan: which plan, when it renews, and the customer and subscription numbers from our payment provider. We never see or store card details.
If you use the unfollowers report
- The Instagram data file you choose is read in your browser. It isn't uploaded to us.
- Only if you press Save do we store the follower and following lists from it (usernames and follow dates), the account name and the file's date, so we can show who unfollowed you next time. We keep up to 12 saved files per account, and a reminder date if you ask for one.
Reviews and affiliate applications
- If you write a review, we keep the name you choose to show, your rating and your text. It's public once approved, and deleted with your account.
- If you apply to the affiliate program, we keep what you send in the form (name, email, channel, audience size, note) to answer you.
- If you send feedback, we keep your message, the page you came from, and your email if you add one.
Public Instagram data
When you look up a public account, our data provider fetches its public profile, posts or stories. We keep this briefly in memory to make repeat views fast (from one minute for stories to six hours for public stats pages) and don't build profiles of the people you look up.
2. How we use it
- To run the tools you use, and to keep your saved lists, tracked accounts and plan.
- To apply the free limit and stop abuse (bots, scraping, people getting around the limit).
- To send emails you asked for: sign-in links, reminders, story alerts and receipts.
- To meet legal and tax duties for payments.
3. Who we share it with
We don't sell personal data or share it for advertising. We use these service providers, only for what they do for us:
| Provider | What for | What they receive |
|---|---|---|
| Stripe | Payments | Your email and payment details (entered on Stripe's own form) |
| Cloudflare Turnstile | Bot protection | Browser signals needed to tell people from bots |
| Resend | Sending email | Your email address and the email's content |
| Our Instagram data provider | Reading public Instagram content | The public username or post you looked up, never who you are |
| Our hosting provider | Running the site and database | Everything above, stored on our behalf |
We may also disclose data if the law requires it, or to a buyer if the business is sold (this policy would still apply).
4. How long we keep it
| Lookup counts | Deleted after 60 days (monthly plan counts within 3 months) |
| Sign-in links | Work for 15 minutes, once |
| Signed-in sessions | 30 days, or until you sign out |
| Visitor ID cookie | Up to 400 days |
| Account, tracked accounts, saved lists | Until you delete them or your account |
| Payment records | As long as tax law requires, at Stripe and with us |
5. Cookies and storage
We use only what the site needs to work. No analytics, advertising or tracking cookies.
- Session: keeps you signed in.
- Visitor ID: counts free lookups.
- Human pass: remembers the bot check for 30 minutes.
- In your browser only: your recent searches, and whether you closed the “add to home screen” prompt. These never leave your device.
6. Your rights and choices
Wherever you live, you can:
- Delete your account and everything linked to it, at any time, from your account page. It's immediate.
- Delete saved lists one by one, or stop tracking an account.
- Ask us for a copy of your data, to correct it, or to stop using it, by writing to support@owlglance.com.
- Stop reminders and story alerts at any time from your account; each of those emails says where.
If you're in the EU, UK or California, these are also your legal rights (access, correction, deletion, portability, objection), and you can complain to your data protection authority. We reply within 30 days.
7. Security
Connections are encrypted (HTTPS). Sign-in links and sessions are stored only as one-way hashes, and image links are signed so they can't be misused. No system is perfectly safe; if a breach affected you, we would tell you without delay.
8. Children
OwlGlance isn't meant for anyone under 16, and we don't knowingly collect their data. If you think a child has given us data, write to us and we'll delete it.
9. Changes and contact
If we change this policy, we'll update the date above, and tell account holders by email about important changes. Questions or requests: support@owlglance.com.