Privacy Policy

1. Information we receive

When you use the Ideosave downloader, the following information may be processed:

• The URL you submit: sent to the backend to validate the host, check whether it is supported, fetch public page metadata (title, description, thumbnail, public media manifests) and surface available formats.
• Standard webserver logs: IP address, user agent, and requested URL. These logs are used only for rate limiting, abuse prevention, and debugging platform-level breakages. Logs are rotated on a short schedule and never exported for marketing.
• Contact form submissions: if you choose to email us or submit the form on the Contact page, the email address and message text you include.

2. How information is used

Ideosave uses the limited information above solely to:

• Run the downloader service end-to-end.
• Prevent abuse (rate limiting, SSRF protection, bot detection).
• Respond to emails or contact-form submissions you initiate.
• Maintain service health and fix broken platform extraction.

3. Cookies and browser storage

Ideosave does not use tracking cookies. Language selection (if implemented) and any theme preference are kept in your browser's local storage only if you explicitly interact with those controls. The core download flow works with cookies and storage entirely disabled.

4. Third parties

Ideosave's backend fetches public page metadata from the platforms you submit URLs for (Facebook, Instagram, TikTok, Vimeo, Xiaohongshu) under a generic IdeosaveBot user agent. Ideosave does not log into those platforms on your behalf or share any identifiers with them.

If advertising or analytics scripts are added to the site in the future, this policy will be updated and they will be isolated from the downloader UI so they cannot cover or impersonate the download button.

5. Data retention

• Job tokens expire 30 minutes after creation and are not stored in any persistent database.
• Platform fetch operations are stateless; no copy of the downloaded video is retained by Ideosave beyond the live request.
• Webserver access logs are retained for no more than 30 days for abuse and incident response only.
• Contact emails are retained only as long as required to respond to you and comply with applicable law.

6. Security

We take a defense-in-depth approach: all submitted URLs are validated and run through an SSRF guard before any outbound fetch is made; fetch timeouts are capped; HTML response sizes are capped; request bodies are capped at 64 KB; and per-IP rate limiting is active. See the Terms of Service for acceptable-use rules.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or export personal data we hold about you. To exercise any of those rights, or to ask a question about this policy, email privacy@ideosave.com or use the Contact page.

8. Children

Ideosave is not directed to children under 13 and we do not knowingly collect personal data from children. If you believe we have inadvertently done so, contact us and we will remove the information promptly.

9. Changes to this policy

We will update this Privacy Policy when we make material changes. The effective date at the top of the page will change and, where appropriate, we will surface a notice on the homepage or Contact page.