1. Overview & Core Philosophy

Unlockt - Instagram Saves Manager ("we", "our", or "the extension") is a browser extension created to assist users in exploring, organizing, and archiving their saved Instagram content.

We are firmly committed to protecting your privacy. Unlockt operates entirely client-side (local-first). All data indexing, search, media processing, and storage take place strictly inside your local browser. We do NOT operate external tracking servers or cloud databases.

2. Data We Process Locally

To provide its services, Unlockt processes the following data locally on your device:

• Instagram Session Cookies: Accesses active Instagram session cookies (sessionid, ds_user_id, csrftoken) solely to authenticate requests to Instagram's official REST and GraphQL endpoints. Your Instagram password is never accessed or requested.
• Saved Post Metadata: Reads captions, hashtags, creator usernames, timestamps, like/comment counts, and CDN thumbnail links for content you have saved on Instagram.
• Local Media Storage: Saves your metadata and download logs directly into your browser's local IndexedDB (VaultDB) and LocalStorage.

3. How We Use Your Data

All processed information is used exclusively to deliver the extension's local features:

• Organizing and displaying your saved content in your personal local dashboard.
• Enabling offline semantic search, creator analytics, and hashtag collections.
• Generating photo collages, inspecting video reels, and batch exporting archives.

4. Data Storage, Security & Retention

• 100% Local Storage: All saved items and metadata remain on your device. Zero data is uploaded to our servers or any cloud database.
• Data Retention & Deletion: You have complete control over your data. You can delete all stored records at any time using the dashboard's "Hard Refresh / Reset" option, or by uninstalling the extension from Google Chrome.

5. Third-Party Sharing & Tracking

• No Data Selling or Sharing: We do NOT sell, rent, monetize, or transmit user data to any third party.
• No External Telemetry: The extension does NOT include Google Analytics, advertising pixels, or third-party tracking scripts.
• Network requests occur strictly between your browser and official Instagram servers (*.instagram.com, *.cdninstagram.com, *.fbcdn.net).

6. Permissions Justification

• cookies: Used to authenticate requests with your existing Instagram login session without requiring password entry.
• storage & unlimitedStorage: Used to store saved metadata and history records in IndexedDB.
• downloads: Used to save media files (photos, reels, ZIP archives) directly to your computer.
• activeTab & scripting: Used to communicate with the local dashboard and display status indicators.
• Host Permissions: Used to fetch saved metadata and media streams directly from Instagram CDN endpoints.

7. Contact Information