Last updated · June 23, 2026

Privacy Policy

The short version

You can use Incognitogram without an account, email, or any personal information. We do not connect what you view to who you are. We do use Google Analytics with cookies, we display ads through third-party advertising partners (which may set their own cookies), and our hosting provider keeps short-lived server logs — see below for the full picture.

What our servers log

Like every web host, Vercel (our infrastructure provider) records your IP address, user-agent, and the page you requested for each request. These logs are retained briefly (typically under an hour on the free tier) and used only for operational debugging and abuse prevention.

Google Analytics

We use Google Analytics 4 to understand aggregate site traffic — which pages are popular, which countries visitors come from, and how the site performs. GA sets cookies and may collect technical information about your device and browser. You can opt out by using a tracker-blocking extension (uBlock Origin, Brave shield, Safari's Cross-Site Tracking prevention, etc.) or by enabling Do Not Track in your browser settings.

Advertising

Incognitogram is supported by advertising. We work with third-party advertising partners — currently Mediavine (including its Grow and Journey products) and, as a fallback, Google AdSense — to display ads on the site. These partners and their sub-vendors may use cookies, device identifiers, and similar technologies to serve, measure, and (where permitted) personalize the ads you see, and may collect information such as your IP address, approximate location, and browsing activity on this site. We do not sell your personal information for money. Where required by law (for example in the EU/UK and California), our advertising partners present a consent or preference prompt that lets you control personalized advertising and exercise your choices.

What we track about Instagram lookups

When you view an Instagram profile through Incognitogram, we record only the username you looked up, whether the lookup succeeded, the locale of the page, and a timestamp. We do not record your IP, user-agent, cookies, or any other identifier alongside this data — so the record cannot be tied back to you. We use these aggregate counts to understand which accounts are popular and to plan content. They are not shared with anyone outside Incognitogram.

Instagram content

We fetch publicly available Instagram stories, posts, and profile data on your behalf via a third-party API provider. Media is proxied through our servers so Instagram never sees your IP, but we do not store the media long-term — only short-lived caches (typically 2-5 minutes for profile data, 24 hours for media files) sit in front of the upstream API.

Cookies

Google Analytics may set cookies (typically _ga and _ga_*). Our advertising partners (see Advertising above) may also set cookies or use similar technologies to measure and personalize ads. We use a small piece of browser local-storage to remember your dark-mode preference and your chosen language. We do not set advertising cookies of our own — any such cookies come from our third-party ad and analytics partners.

Third parties

We run Google Analytics and third-party advertising partners (see Advertising above), which receive data as described in those sections. We do not sell your personal information for money. We also use third-party infrastructure (Vercel for hosting, Upstash Redis for aggregate analytics storage, HikerAPI as the Instagram data source) — each of these only receives the minimum data required to deliver the service.

Your rights

We don't collect identifying data ourselves, so there is generally nothing on our side to delete on request. If you live in the EU/UK/California, you can use the consent or preference prompt provided by our advertising partners to control personalized ads, and you can consult Google's privacy controls for what Google Analytics and Google ads hold about you. If you have concerns about our handling, contact us and we'll respond promptly.

Changes

We may update this policy as the service evolves. The date at the top of this page reflects the last revision.