Privacy Policy

1. Who we are

Reels Downloader operates the website at reelsdownloader.org, a free web tool for saving public Instagram Reels and Facebook videos as MP4 files. For the purposes of the UK and EU General Data Protection Regulation we are the data controller for the limited personal data described below. You can reach us at info@reelsdownloader.org or through our contact page. We are an independent project and are not affiliated with Instagram, Facebook or Meta Platforms, Inc.

2. Information we collect

2.1 Information you give us directly

The only way to give us personal information deliberately is to write to us. If you use the contact form, the feedback box or email us, we receive your email address, your name where you give it, any video link you include, and the content of your message. We use that to answer you and for nothing else.

2.2 Information collected automatically

Like every web server, ours records technical information about requests:

• A truncated IP address, with the final octet removed before writing.
• The date and time of the request.
• The page or resource requested and the HTTP status returned.
• The user agent string, identifying your browser and operating system.
• The referring page, where your browser sends one.

These records exist to keep the service running and to detect abuse such as automated scraping or denial-of-service attempts.

2.3 Video links you submit

When you paste a link, our server uses it to fetch the corresponding public page and find the video files. For Facebook videos we also keep a short record of those file addresses so the download buttons work. It holds nothing about you and is deleted within three hours. We do not maintain a database of submitted links, a list of popular videos, or any per-visitor download history.

3. Information we deliberately do not collect

This section matters as much as the previous one, because privacy is mostly determined by what a service chooses not to build.

• Instagram, Facebook or Google credentials. We never ask for a username, password, session cookie or two-factor code, and there is no field on this site in which to enter one.
• Account data. There are no user accounts, so there are no profiles, preferences, saved libraries or download histories.
• The video files themselves. Videos pass through our server on their way to your device, so the download works in every browser, but they are relayed as they arrive and never saved.
• Precise location. We do not request geolocation permission.
• Cross-site behavioural profiles. We do not run remarketing pixels, fingerprinting scripts or social tracking widgets.

4. Why we process information

5. Cookies and analytics

Because there is nothing to log in to we set no session cookies, and because we store no preferences we set no preference cookies. We do use Google Analytics 4, which writes a first-party cookie so that repeat visits from the same browser are counted as one returning visitor rather than several new ones. It is loaded asynchronously and does not block the page. Google Analytics 4 anonymises IP addresses by default and we do not use it to build advertising audiences. Google's own privacy policy governs what it does with that data.

Advertising partners may set their own cookies, principally for frequency capping and viewability measurement. Where the law requires prior consent, a consent notice is shown before those technologies are used, and declining does not restrict your access to the downloader. You can also block third-party cookies in your browser without breaking any feature of this site.

6. Advertising

The service is free because it carries display advertising. We place three constraints on that advertising and treat them as non-negotiable: no interstitials or pop-unders; no adverts styled to be mistaken for a download button; and no auto-redirects. If you see an advert that violates those constraints, please report it with a screenshot. That is how bad creative gets removed from a network.

7. Third parties

We keep the supplier list deliberately short: our hosting and content-delivery provider, our analytics provider (Google Analytics), our advertising partner, and our email provider. Each acts under contract and may process data only on our instructions. Where a provider is located outside the UK or EEA, transfers are made under the UK International Data Transfer Addendum or the EU Standard Contractual Clauses as appropriate.

When you download a video, our server requests it from Instagram's or Facebook's content delivery network and passes it on to you, so Meta sees that request coming from our server rather than from your device. What Meta does with the content itself is governed by Meta's own privacy policy.

8. How long we keep information

• Server logs: retained for a rolling period of no more than 30 days.
• Analytics event data: retained for 14 months, after which the underlying user and event records are deleted; aggregate reports remain.
• Correspondence: retained for up to 24 months so we can follow up on a related issue. Legal correspondence may be kept longer where we need it to establish or defend a claim.
• Submitted video links: not retained beyond the request and the log window. Facebook download records, which hold video file addresses and nothing about you, are deleted within three hours.

9. Your rights

Depending on where you live you may have rights to be told what we hold about you; to have inaccurate information corrected; to have information erased; to restrict or object to processing; to receive your data in a portable format; and to withdraw consent where processing relies on it. Residents of California and other US states with comparable statutes have rights to know, to delete, and to opt out of sale or sharing. We do not sell or share personal information as those laws define it, so there is nothing to opt out of.

To exercise any right, email info@reelsdownloader.org. We respond within 30 days and do not charge a fee. Because we hold so little, the honest answer to most access requests is that we hold nothing beyond any correspondence you have sent us. If you are unhappy with our response you may complain to your local supervisory authority.

10. Security

The site is served exclusively over HTTPS with modern TLS, so traffic between your browser and our servers cannot be read or altered in transit. We keep our dependency surface deliberately tiny and patch promptly. Access to systems is limited to the people who need it and protected by multi-factor authentication. No system is perfectly secure, but the strongest protection here is structural: we hold very little data, so a breach would expose very little.

11. Children

The service is not directed at children under 13, or under 16 where local law sets that threshold, and we do not knowingly collect their personal information. Instagram and Facebook themselves require account holders to be at least 13. If you believe a child has sent us personal information, contact us and we will delete it.

12. Changes to this policy

We update this policy when our practices change or when the law requires it. The effective date at the top always reflects the current version, and material changes are noted here. Continuing to use the site after a change means you accept the revised policy.

Revision history. 10 September 2026 - first published.