Privacy Policy

• Your email address, used only to sign you in and to send unfollow-alert emails you asked for.
• Subscription state: your Stripe customer ID and the status, price, and renewal date of your subscription (or, for a one-time 30-day purchase, its end date), kept in sync from Stripe.
• A monthly counter of how many unfollow-alert emails were sent to you, so free accounts can be capped at four per month.
• A log of the emails we sent you and the checks we ran (kind, time, success or failure and the subject line, never the names from an unfollow alert; for checks, the follower count and Instagram username), shown to you on the history page.
• Feedback you type into the Feedback box, with your email if you were signed in or chose to give one.

Before you sign in on this site from the browser the extension is in, only a check of whether you are signed in and which plan you are on, with no Instagram data. After you sign in, and only when that check confirms you are still signed in right before each send:

• Heartbeat - after each scan, manual or automatic, and when Instagram signs you out or back in: your Instagram username, your follower count, a signed-in / signed-out flag and your site account id. We log the follower count with the Instagram username and time for the chart on the history page; those records are deleted after 30 days. We note when the extension last reported in, and on a paid tier also keep the latest time, username and signed-out flag, to tell whether your browser is still running and to email you when it goes quiet or Instagram signed you out.
• Unfollow alert - the usernames an automatic scan found had unfollowed you, whether each looks blocked or deleted, which of them are on your watchlist, the usernames of new followers the same scan found (up to 20), and your site account id. The usernames go into the alert email. New email log entries use the subject “Unfollow alert” and no message body; older entries may show a username in the subject. Your cloud backup also contains them while it is on. Alerts are on by default and can be turned off in the extension's settings.
• Unusual-activity notice - when a scan finds your own account changed the way a takeover does (a burst of new follows or posts, a renamed profile), the kind of change with the two counts, and for a rename the old and new username. Your name, bio and link text never leave your device. We email you about it once a day at most; on a paid tier the server's own reads of your public profile page can raise the same notice while your browser is closed.
• Cloud backup - on by default once the extension sees you signed in, and can be turned off any time in its settings: your unfollow history, follower snapshot, watchlist, settings and Instagram account id, as one private file only your account can read. It feeds the history page. “Clear unfollow history” in the extension deletes it.

No Instagram password, ever. No scan results or follower lists beyond the cloud backup, the Max snapshot and the follower lists of accounts you track described here (fetching both is paused) - the scanning itself happens inside the extension on your device. Nothing is sold or used for advertising; the only third parties that touch any of it are the processors named below.

The site runs on Vercel, and its database, sign-in and cloud backups are stored with Supabase. They process this data only to run the site for you.

The extension's use and transfer of information received from Instagram and from this site to any other app comply with the Chrome Web Store User Data Policy, including its Limited Use requirements. That data is used only to provide and improve the features described on this page, is never sold, and is never used for advertising or for determining creditworthiness.

On a paid tier a background job reads the public follower count off your profile page about every two hours (six when your extension has reported in recently), through a proxy service that carries only that page request, and if it falls we email you that it fell. No login to Instagram is involved and we never act on your account. The Max tier can additionally fetch a snapshot of your public follower list (account ids and usernames only) from a third-party data provider (HikerAPI) when a drop is detected, and keep the latest snapshot so the next drop can be compared against it and the departed accounts named in the email. That name lookup is paused right now: Max currently gets the same count email as Pro and no follower list is fetched. Cancelling your subscription stops monitoring; email support@igunfollowchecker.com to have the stored username, count and snapshot deleted.

The Track page lets you name public Instagram accounts that are not yours and buy 30 days of checks for each. For those accounts we store the username, id, profile picture link and follower count, read the public follower count about every two hours, and fetch the public follower list (account ids and usernames only) from the same third-party provider (HikerAPI) when the count changes, keeping the latest list so the next one can be compared and the people who followed or unfollowed recorded with a date. Only accounts with at most 2,000 followers can be tracked, and a private account's follower list is never read: for it, only the public follower count is. Right now the page only reads public follower counts for accounts already on it: adding accounts, purchases and fetching follower lists are paused. Everything recorded is visible only to you. Removing an account from the page deletes its list and its history at once.

Payments are handled entirely by Stripe. Card details are entered on Stripe's hosted checkout and never touch this site. Stripe's handling of your data is governed by their privacy policy.

Emails (account confirmation, password reset, unfollow alerts, unusual-activity notices, and on a paid plan the follower count drop, browser-closed and Instagram signed-out reminders, the plan-ending notice, tracked account updates and a weekly summary that lists usernames from your cloud backup) are sent through Resend. They process the recipient address and the message (for an unfollow alert, that includes the usernames in it) solely to deliver it. Profile pictures shown on the history page are fetched from Instagram’s CDN through this site so your browser never requests them from Instagram directly; nothing about them is stored.

Cancel your subscription from the dashboard, then email support@igunfollowchecker.com to have your account row and email address removed. Cancelling in Stripe stops all future billing immediately at the end of the paid period.