Privacy Policy
Last updated: April 18, 2026
1. Who we are
SilentPeek ("we", "our", "us") operates silentpeek.com. We are not affiliated with Instagram, Meta Platforms, or any of their subsidiaries. For privacy questions, email privacy@silentpeek.com.
2. What we collect
Free, anonymous usage
You can use SilentPeek without creating an account. In this mode we collect the minimum required for the service to work:
- Your IP address (used for abuse detection and rate limiting)
- Standard browser information (user-agent, referrer)
- Search queries you enter (Instagram usernames and hashtags)
- Aggregated page-view counts for analytics (no individual tracking)
We do not set any cross-site tracking cookies. Your search history is saved only in your browser's local storage and never transmitted to us.
Paid accounts
When you purchase a Premium subscription we collect:
- Your email address (for login magic links and billing receipts)
- Subscription status and plan (no credit-card data — handled by our PCI-compliant payment provider)
- Your tracked profiles and hashtags, download history, and notification preferences
3. How we use your data
- To operate the service (fetch public Instagram content you requested)
- To send you transactional email (magic links, receipts, notifications you opted into)
- To prevent abuse, fraud, and detect suspicious activity
- To improve the product (aggregated, anonymized analytics)
We never sell your personal data. We never share it with advertisers.
4. Public Instagram content
SilentPeek displays content that Instagram makes publicly available. We do not store Instagram content beyond short-term caching (minutes to hours) needed for performance. When you download a file, it is streamed through our servers and not retained.
If you are an Instagram user and want content attributed to you removed from our cache, email dmca@silentpeek.com — see our content report page.
5. Cookies
We use only essential cookies: a session cookie for paid users (Supabase Auth) and no analytics or marketing cookies by default. You can disable cookies in your browser — the free tier will continue to work; paid login will not.
6. Third-party services
- Supabase (database and auth) — EU-hosted, GDPR-compliant
- Vercel (hosting) — encrypted in transit and at rest
- HikerAPI (public Instagram data fetcher) — receives the Instagram username or hashtag you search, not your identifying info
- Resend (transactional email) — stores email addresses for delivery
7. Your rights
If you are in the EU, UK, California, or any jurisdiction with privacy rights, you have the right to:
- Request a copy of your personal data
- Correct inaccuracies
- Delete your account and all associated data
- Opt out of marketing communications
- Withdraw consent at any time
Email privacy@silentpeek.com to exercise any of these. We respond within 30 days.
8. Data retention
- Free-tier usage logs: 30 days
- Paid accounts: retained until you delete your account
- Email notifications: deleted 90 days after send
- Backups: 30 days rolling
9. Changes to this policy
We'll update the "Last updated" date above whenever we materially change this policy, and email paid users if the change affects them.
10. Contact
Email privacy@silentpeek.com for any privacy question.