Privacy

The short version

• KeepClip has no accounts and sets no cookies of its own.
• Outside Europe, the UK and Switzerland, pages show banner ads from the ad network Adsterra, which may use cookies. In Europe, the UK and Switzerland no ads are shown.
• Visits are counted with Cloudflare Web Analytics, which uses no cookies and never sees the links you look up.
• The link you paste is used to find the media, and the answer is kept for a few minutes.
• Your IP address is used for about a minute to stop any one connection making too many lookups, then deleted.
• KeepClip does not store the photos or videos you download.

When you look something up

The Instagram link you paste (or a @username, on the profile picture page) is sent from our server to one of our lookup providers, SociaVault or HikerAPI, which finds the media for that public post, story or profile. The provider receives the link, not your IP address: the request comes from our server, not your browser.

The answer (links to the media files, the account name and the post's caption) is kept in our cache, run by Upstash, for up to 5 minutes, or 1 minute if nothing was found. That makes a repeated link load faster and costs us less. It is not linked to you.

YouTube pages

A YouTube link you paste is sent from our server to our YouTube lookup provider, “YouTube Media Downloader” on RapidAPI, which returns the video's title and file links. It receives the link, not your IP address. The answer is kept in our cache for up to 5 minutes, like Instagram lookups.

Video files download straight from YouTube's servers, run by Google, to your device. Audio files pass through our server on the way to you, so they save under the video's name. They are not stored.

Your IP address

To stop automated abuse, each lookup adds one to a counter for your IP address in the current minute. The counter is kept in the same cache and deleted automatically after about 60 seconds. It records how many lookups were made, not what was looked up.

Our hosting provider, Vercel, handles every request to the site and keeps short-lived technical logs, which can include IP addresses, as part of running the service. Our own logs record which post was looked up, whether it worked, how long it took, whether it came from the site or the Telegram bot, and, for the site, the country it came from (and the state, in the United States), as worked out by Vercel. They do not record your IP address, your city or anything else that says who asked.

Counting visits

To know how many people use KeepClip and how they found it, pages load Cloudflare Web Analytics. For each visit it records the page, the site that linked you here, your country, your type of device, browser and operating system, and how fast the page loaded. It sets no cookies and stores nothing in your browser, and Cloudflare says it does not track visitors across websites.

It is only loaded on pages you open directly. It is never loaded on a results page, whose address contains the link you looked up, so the links you look up are never sent to it.

When you download

Photos and videos download straight from Instagram's servers, run by Meta, to your device, the same way they load when you use Instagram. Meta receives that request from your browser. The one exception is profile pictures: Instagram doesn't allow other sites to load them directly, so they pass through our server on the way to you. They are not stored.

Sharing from the Instagram app

If you add KeepClip to your phone's home screen and share a link to it, your phone sends that link to our /share address, which treats it exactly like a pasted link. Your phone's language setting is used only to open the page in your language.

The Telegram bot (@KeepClip_bot)

When you send the bot a link, it is looked up exactly like a link pasted on the site. Your Telegram user ID stands in for an IP address in the one-minute lookup counter, and the files are sent to you by Telegram, which fetches them from Instagram's servers.

The bot may show you one ad after a download, never more than one every 10 minutes: a message labelled as an ad, with a button that opens an advertiser's page through the ad network Adsterra. Nothing about you is sent to Adsterra unless you tap that button, and then your browser opens their page like any other website. To enforce the 10-minute gap, the bot keeps a note that you were shown an ad, which deletes itself after 10 minutes.

Ads on the website

To pay for the service, pages show banner ads from Adsterra (adsterra.com), only to visitors outside the European Economic Area, the UK and Switzerland. Each ad loads from Adsterra's servers inside a sealed frame, so it cannot read or change the page around it. Adsterra receives your IP address and browser details, as any website you load does, and may set its own cookies to choose ads and count them; its own privacy policy applies to that. Ads never receive the links you look up: they are not shown inside the results, and a results page's address is not passed to them. KeepClip shows no pop-up or pop-under ads.

Children

KeepClip is not intended for children under 13.

Changes and contact

If KeepClip ever adds other advertising, cookies or analytics, this page will be updated before that happens. Questions about privacy: keepclip.help@gmail.com. See also the terms and takedown requests.