Privacy policy

Who we are

Innovaduck Limited operates IG2IRL at ig2irl.app and is responsible for the personal data it processes to provide this service.

This policy describes our hosted service. If you use a separately self-hosted copy, its operator is responsible for its configuration and data handling.

Data we handle

Files, pasted posts and your device Library

Selected Instagram export files, pasted post or Reel links, user-provided captions, collections, unfinished Review and device places are processed in your browser. We do not upload them merely because you import them or sign in. IG2IRL does not fetch a post's caption or media from a pasted link.

Approved device places, preferences and some account caches are stored in this browser. This local storage is not encrypted by IG2IRL; people with access to your device or browser profile may be able to read it. Library filter values can appear in the page URL.

Optional Android PWA sharing

Installed web apps in supported Android browsers can receive text and links from the system share sheet. With an active local service worker, IG2IRL stores them in this browser's IndexedDB pending inbox without forwarding them. No shared fields are added to navigation query strings, application logs or telemetry; no shared link or media is fetched. Canonical links are optional for manual Review.

If the local receiver worker is missing, the browser may instead transmit the share POST to the application host. The application rejects it without reading, importing or echoing its body, but hosting infrastructure still receives the request and may process it under its own policies. This feature therefore does not promise unconditional local-only transmission. File and pasted-post intake are unchanged.

Optional sign-in and Account Library

When you sign in, our identity service handles your sign-in details, including your email address and any name you provide. IG2IRL uses a verified account identifier and session to authorize access to your Account Library.

Account features store approved places and their provenance, such as names, coordinates, source links, caption evidence and collections, on the server. Device transfer requires an explicit Sync to account action and keeps device copies. Raw import files and unfinished Review are not transferred. Account edits may be queued in this browser for later synchronization.

Optional Instagram DM intake

If enabled, this feature lets you consent to server handling and pair your Instagram sender with your signed-in IG2IRL account. We store the sender/account association, temporary linking information, and supported new shared-post metadata: a title or caption, original link when supplied or recovered from Meta, media type and receipt/expiry information. If an accepted paired share supplies a media ID but no original link, our server may send that ID to Meta to request only its permalink. The media ID is not retained in our pending-item storage. Pending items are accessible only to your paired account through IG2IRL; that is not end-to-end encryption.

Meta sends message events to our server, so even an unpaired message may be processed transiently to determine whether it can be handled. Unpaired conversations are not imported into your IG2IRL pending inbox. We do not download media, retrieve old conversations, synchronize Instagram saved collections or automatically save approved places. Caption and collection edits made in Review stay in your browser unless included in a later approved account save.

Meta and authorized operators of the project Instagram inbox can see messages sent to that inbox. Sending a DM is therefore different from local file or pasted-post intake.

Other services and network requests

• Vercel: hosts the application and processes requests and associated operational information. If Web Analytics or Speed Insights is enabled, it also processes page-level usage or performance telemetry.
• Logto: provides optional sign-in and identity management.
• Neon: stores optional account places and pending DM data in the application database.
• Meta/Instagram: handles messages sent to the project inbox and supplies authorized message events and project-account information.
• OpenStreetMap Nominatim: receives composed place-name lookup queries and any location context included in those queries, not your full captions, export files or collections.
• OpenFreeMap: supplies map styles and tiles. Tile requests can reveal the area displayed and ordinary network information, but do not contain Instagram captions or source links.

Network services can receive information such as your IP address and request metadata. We do not intentionally add private import, Review or place payloads to telemetry. Hosting logs and enabled telemetry are separate from browser-local content processing.

Providers operate under their own terms and privacy policies. Data may be processed outside your country. The applicable hosting regions, international-transfer arrangements and provider backup/log retention must be confirmed for this deployment; we do not promise that all data stays in one country.

Why we process data

We use data to provide the features you request, authorize account access, deliver paired DM items for manual Review, resolve place queries, and maintain the security and operation of the service.

Where data protection law requires a lawful basis, we rely on service delivery (performance of our agreement with you) for requested account features, your consent for optional paired DM intake, and legitimate interests in protecting and operating the service for necessary security and operational processing.

You can withdraw consent to future paired DM intake by unlinking your Instagram sender. Unlinking also deletes pending items. It does not undo earlier lawful processing, delete already approved places, or erase messages held by Meta. Consent to DM intake is not consent to unrelated use of your messages.

How long data remains

Browser data

Device places and preferences remain until you remove them or clear this site's browser storage. Up to 100 pending Android shared text/link items remain locally until completed Review, discard, site-data clearing or browser eviction. Unfinished Review selections and form edits are held in memory; a reload retains the original pending share, not those edits. Account caches may remain on other offline devices.

Account places and identity

Approved account places remain until you delete them or your account. Minimal synchronization and retry records support account changes; account deletion removes these account records and requests deletion of your Logto user.

Pending DM captions and links

Pending content expires after six days and 23 hours and is hidden after expiry. Scheduled cleanup is required to physically delete it within the seven-day retention target. Completed Review, discard, unlink and account deletion also remove pending content. A cleanup outage can delay physical deletion.

DM linking and delivery records

Linking challenges expire after ten minutes; expired challenge details are cleared by cleanup. The sender association remains while linked. Content-free message hashes expire after eight days to prevent retries or unsends from recreating removed items.

Security and project-connection records

Minimal deleted-account and revoked-connection suppression records, project identifiers and token-bootstrap history are retained until deliberate operator recovery to prevent replay or unintended reconnection. They are not anonymous just because some values are hashed. Any generated callback deletion-status record is retained for 90 days; automatic Meta callback compatibility has not been verified.

Provider logs, backups and Instagram messages

Deletion from live IG2IRL storage does not immediately erase provider logs, recoverable backups, Meta's inbox or copies on other devices. Provider backup/log retention and post-restore deletion reconciliation are not yet finalized. Contact us for the current position; no fixed backup-erasure deadline is promised here.

Delete your data

Device Library and local copies

Delete places in the device Library, or use your browser's site-data settings to clear storage for ig2irl.app. Clearing site data removes local preferences and caches too. Export anything you want to keep first; unsent account edits can be lost. Repeat on other devices as needed. Clearing browser data does not delete server account places or Instagram messages.

For the local Android shared inbox, open Android sharing in Import to discard individual pending items or confirm Discard all pending shares. Finish or skip queued shared Review before clearing the inbox. This does not delete approved Library places.

Pending Instagram shares

Open Send a DM in Import, then skip an item in Review to discard it. Duplicate post links can combine several pending receipts; saving or skipping that Review removes them all. To unlink your sender, open Account, find Instagram connection, choose Unlink Instagram sender and confirm. Finish or skip queued DM Review before leaving it. Unlinking removes your pending DM items and sender association, not approved device or account places.

Account Library and sign-in

Delete individual places from your Account Library, or open Account, choose Delete account and type the requested confirmation. Account deletion removes your live account places and pending DM data and deletes your sign-in identity when the operation completes. Device Library copies remain. If deletion is unavailable or fails, use the contact process below.

Request help without signing in

Email ig2irl@innovaduck.tech with the subject "IG2IRL data deletion request". Tell us which data you want removed and the account email or Instagram handle needed to locate it. We may ask for proportionate proof that you control the relevant account before deleting data. Do not send passwords, access tokens or an Instagram export.

This contact process is also available to people who messaged the inbox without pairing or who cannot access their IG2IRL account. We will respond and handle requests within the deadlines applicable to your request and explain any data we must retain and why. Messages in Instagram itself must be managed through Instagram; our deletion actions do not erase Meta's copies.

Your rights and policy changes

Depending on applicable law, you may have rights to access, correct, erase or receive a portable copy of personal data, restrict processing, object to processing based on legitimate interests, and withdraw consent. Contact ig2irl@innovaduck.tech to exercise these rights. You may also complain to your applicable data protection authority.

We may update this policy when the service or its data handling changes. The date above identifies the current version; material changes will be explained before new optional processing is introduced.

Our Terms of service describe the service and appropriate use.