Takomi Saver — Privacy Policy

1. Who this covers

Takomi Saver is a Chrome extension that downloads media — photos, videos, Reels, Stories and Highlights — from Instagram profiles you can already view. It is published by takomi (hello@takomi.dev) and was previously listed under the name IG Saver; this policy covers both names and all versions currently distributed.

2. What we never collect

Takomi Saver does not collect, transmit or share:

• Your name, address, or any identity information
• Passwords, login credentials, or Instagram cookies
• Browsing history or activity on any site other than Instagram pages you open
• Analytics, usage statistics, or telemetry of any kind
• Location data
• Card numbers or payment credentials
• Anything at all sold or handed to advertisers or data brokers

There is no analytics SDK in the extension.

3. What the extension reads on your device

To do its work, the extension reads the following locally, inside your browser only:

• The Instagram pages you open — read in memory to find the photos and videos to download. Not stored, not sent anywhere.
• Your Instagram session — the extension works inside your own logged-in session, so it sees only what you can already see. Nothing from your session is stored or sent to us or anyone else. The extension holds no cookies permission and does not read, create or modify cookies.
• The media files themselves — saved straight from Instagram to your device. They never pass through a server of ours.

4. What is stored on your device

The extension uses Chrome's local storage (chrome.storage.local) to keep:

• Your settings — such as download options, file names and interface language
• Task state — progress of an active or paused download, so an interrupted job can resume
• Your Pro licence key and its activation state, if you have bought Pro
• Status notices — the latest notices fetched from us, and which ones you have dismissed, so a dismissed notice never comes back
• A report-only install code — a random number created the first time you send a problem report, and used for nothing else

All of it stays on your machine and is deleted when you remove the extension. None of it is transmitted to us, except the licence key when it is verified (§6) and the install code inside a problem report you choose to send (§7).

5. Which servers the extension contacts

These are the only sites the extension is permitted to reach:

• www.instagram.com — to load the posts you asked to download
• *.cdninstagram.com, *.fbcdn.net — Instagram's file servers, where the photos and videos themselves are saved from
• api.takomi.dev — our own server, contacted only to activate, check or deactivate a Pro licence key (§6), to show current Pro prices when you open the upgrade window, to check for status notices, and to deliver a problem report you choose to send (§7)
• api.polar.sh — the licence API of Polar, our former payment provider, kept reachable so that licences bought there before the migration keep working. No new purchases go through it.

There is no other network destination. Nothing is sent on a timer or while the browser is idle: every request follows something you did — opening the popup or an Instagram page, starting a download, using a Pro feature, opening the upgrade window, or pressing "Send report".

6. Buying Takomi Pro

Takomi Pro is optional; the free features work without any account. If you do buy it, this is what happens to your data:

• Payment is handled entirely by PayPal, on a checkout page at paypal.takomi.dev. We never see or store your card details or PayPal credentials.
• Your email address is stored on our licence server (api.takomi.dev) together with your licence key and plan, so we can email you the key, verify it later, restore it if you lose it, and — for a monthly or yearly plan — keep it valid while the subscription renews. This is the only personal data we hold.
• Licence checks from the extension send your licence key and an anonymous device code, made from basic browser settings such as browser version, language and screen size. It lets the same computer keep using one activation after a reinstall. It cannot be turned back into those settings, is not linked to your email in the extension's requests, and identifies no person.
• We send no marketing email. Your address is used for licence delivery and support replies only, and is never shared or sold.

Want your record deleted? Email hello@takomi.dev from the address you purchased with and we will erase it. Deleting it also deactivates the licence key attached to it.

7. Status notices and problem reports

Status notices. When you open the extension's popup or an Instagram page, and at most once every twelve hours, the extension asks our server whether there is a service notice to show. The request carries no personal data, licence key or identifier. Notices are plain text with at most one link, and never contain code. The server sees the request's IP address, as every web server does, and does not store it.

Problem reports. You can send a report from an error message, the download summary, or the popup. Nothing is sent until you press "Send report". A report contains:

• the problem you picked and anything you typed
• your email address, only if you enter one, used only to reply to you
• the extension version, browser and operating system, language, the kind of page (for example "story", never the account name), the error message or download counts, and whether Pro is active
• the page address, only if you tick "Attach this page's address"
• the report-only install code (§4), to prevent abuse

Reports never include your licence key, Instagram password, messages or cookies. We store a one-way hash of the sender's IP address, never the address itself, to block abuse. Reports are kept for 90 days and then deleted, and are used only to fix problems and to reply to you. We never email the address in a report except to reply to you personally.

8. Why each permission is requested

• downloads — save media files to your device
• storage — keep your settings and resume interrupted tasks
• alarms — keep a long download running until it finishes
• offscreen — pack downloads into ZIP files
• declarativeNetRequestWithHostAccess — while a Reels download runs, adjust one request to Instagram so Reels download with fewer requests. It is switched off when the download ends and affects no other site.
• host access to Instagram and its CDNs — read the page and fetch the media
• host access to api.takomi.dev and api.polar.sh — verify a Pro licence key; api.takomi.dev also serves status notices and receives problem reports (§7)

The extension requests no other permission, and asks for no broad <all_urls> host access.

9. Remote code

Takomi Saver executes no remote code. Every line of JavaScript it runs ships inside the package you install from the Chrome Web Store.

10. Children

Takomi Saver is not directed at children under 13, and we do not knowingly hold any data from them.

11. Changes

If the extension's data behaviour changes, this page is updated in the same release and the date at the top changes with it.

12. Contact

Questions, deletion requests, or anything at all: hello@takomi.dev. A real person answers.