Privacy Policy

Last updated: June 5, 2026

FeedDrop (“we”, “our”, or “us”) respects your privacy and is committed to protecting any personal data we handle. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your data.

1. What Data We Collect

When you use FeedDrop, we collect the following data:

• Account information: Your email address, provided when you register or sign in with Google.
• Instagram data: Your Instagram username, Instagram user ID, and a long-lived OAuth access token. The access token is stored securely on our servers and is never exposed to client-side code or third parties.
• Instagram media metadata: When your embedded feed is loaded, we fetch the URLs of your public Instagram posts on your behalf using your access token. We do not store images — only URLs returned by the Instagram Graph API in the moment of the request.

2. How We Use Your Data

We use your data exclusively to:

• Authenticate you and maintain your account session.
• Display your Instagram feed content on websites where you have placed the FeedDrop embed snippet.
• Automatically refresh your Instagram access token before it expires to maintain service continuity.

We do not use your data for advertising, profiling, or any other purpose.

3. Data Storage and Security

Your data is stored in Google Firebase (Firestore database), hosted in the United States or European Union depending on your region. Firebase provides enterprise-grade security including encryption at rest and in transit.

Access tokens are stored in Firestore, which is protected by Firebase security rules restricting access exclusively to server-side code running on our infrastructure. No access token is ever sent to a browser.

4. Third-Party Services

We use the following third-party services:

• Meta / Instagram — OAuth provider and source of Instagram media data. Subject to Meta's Privacy Policy.
• Google Firebase — Authentication and database hosting. Subject to Firebase's Privacy Policy.
• Vercel — Application hosting and serverless infrastructure. Subject to Vercel's Privacy Policy.

5. Data Retention

We retain your data for as long as you maintain an active FeedDrop account. Upon disconnection or account deletion, all associated Instagram tokens, usernames, and IDs are permanently deleted from our systems within 30 days.

6. Your Rights

You have the right to:

• Access your data: View your connected Instagram accounts in the dashboard.
• Delete your data: Disconnect your Instagram account at any time from the dashboard. This immediately deletes your access token and Instagram data.
• Request data deletion by email: Send a request to clgsergosu97@gmail.com with your Instagram username. We will process your request within 30 days.

For full data deletion instructions, see our Data Deletion page.

7. Cookies

We use a single, secure, HTTP-only session cookie to maintain your login session. We do not use tracking cookies, advertising cookies, or third-party analytics.

8. Children's Privacy

FeedDrop is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision.

10. Contact

For privacy-related questions or requests, contact us at: clgsergosu97@gmail.com