Privacy Policy

This policy covers the IGHunter Chrome extension and the ighunter.com website. IGHunter is published by InsightSocial; accounts, purchases and saved data live on InsightSocial's infrastructure, and this policy describes exactly what is stored there and why.

The short version

• IGHunter only reads the Instagram profile you have open. To make the button instant it gets the lookup ready while that profile loads, in your own browser on your own Instagram session. The contact is only shown to you, and saved to your account, when you press Show contact.
• When a lookup succeeds, the revealed profile is stored in your account so it appears in your saved list and re-opening it is instant and free.
• We do not read your Instagram messages, followers, or browsing history, and we never act on your behalf — no follows, likes, comments or DMs.
• We do not sell data. To anyone.

What the extension stores when you reveal a profile

Pressing Show contact reads the fields the profile owner published on Instagram and saves them as one record (ighunter_reveals) keyed to your account:

• Identity of the profile you revealed — username, Instagram user ID, display name, profile picture URL, follower count, category, and whether it is a business or verified account.
• The published contact fields — public email, business email, phone number, bio text, bio links and website, as Instagram serves them to anyone viewing the profile.
• Public "about this account" details where Instagram provides them — join date, country, verification date.
• Bookkeeping — when you revealed it, whether it was a first reveal or a re-open, whether it used a free monthly contact or one from a pack, and the random ID of the extension install it came from, which is how free monthly contacts are counted.

This record exists for three reasons at once: it is your saved profile, it is the ledger your free monthly contacts and your pack balance are counted from, and it is the guard that makes re-opening the same profile free. None of the contact data is collected by us independently — every value comes from what the account holder chose to publish, on Instagram or on the sites their profile links to.

What reaches our servers while you browse

When you open a profile, the extension sends that profile's public fields — the ones listed above, as Instagram serves them to anyone viewing it — to our server, which keeps one shared copy per Instagram profile. That copy is not tied to you or your account; it exists so a profile that has already been looked up can be answered without asking Instagram again. The extension also sends usage events (for example, that a profile was viewed or a reveal completed), tagged with a random ID the extension generates for itself, and with your account once you sign in. None of this includes your Instagram login, your messages or your browsing history.

When a profile published no contact

If a lookup finds no email or phone on Instagram and the profile has links, the extension sends those link addresses — the website field and up to five bio links — to our server, together with the profile's username, display name and bio, which are used only to judge whether a contact found belongs to that profile. Our server opens those public pages, and the links on a link-in-bio page, and returns any email, phone or LinkedIn page it finds. What each page carried is cached per page for up to 90 days; that cache is shared and not tied to you, so the next lookup of the same page is instant. If you are signed in, the check is recorded against your account. Contacts found this way are not added to your saved profiles, and the check never uses a contact.

Anonymous use

You can use your first 10 contacts without an account. The profiles you reveal are stored only on your device, in the extension's local storage, until you sign in. At that point they are uploaded to your new account so you keep them, and they do not count against your free monthly contacts.

Deleting a revealed profile

You can delete any profile from your saved list, and it disappears from every view. The underlying record is retained in a deleted state rather than erased, because it is also the proof you already used a contact on that profile: it keeps your count honest and keeps re-opening that profile free. To request full erasure of your account and everything in it, email [email protected].

Your Instagram session

Lookups run inside your browser using your own logged-in Instagram session: the extension reads your Instagram session cookie in the browser and uses it to ask Instagram itself for the profile you are viewing. Your Instagram password and session cookies are never sent to our servers — the extension only transmits public profile data (the profile you are viewing, the result of a lookup you asked for, and the links checked when a profile published no contact) and the usage events described above.

Account data

Signing in uses your InsightSocial account (Google sign-in or email). We store your email address, name and avatar as provided at sign-in.

Payments

If you buy a contact pack, checkout is handled by Polar, our merchant of record, and the purchase is billed by InsightSocial. Polar takes your card details; we never see or store them. What we keep is the purchase itself — the order ID, which pack it was, how many contacts it added, the amount and currency paid, and the email used at checkout — so the contacts can be added to your account and the order can be found if you contact support.

Where data lives

Everything described in this policy is stored in databases operated by InsightSocial, except card details, which only Polar holds. Data is transmitted over HTTPS only.

This website

ighunter.com is a static marketing site. It sets no tracking cookies of its own; we use Google Analytics to count visits. The site stores none of your revealed data — that lives in your InsightSocial portal, behind your sign-in.

Contact

Privacy questions: [email protected]
Everything else: [email protected]