Takomi Saver — Privacy Policy

1. Who this covers

Takomi Saver is a Chrome extension that downloads media — photos, videos, Reels, Stories and Highlights — from Instagram profiles you can already view. It is published by takomi ([email protected]) and was previously listed under the name IG Saver; this policy covers both names and all versions currently distributed.

2. What we never collect

Takomi Saver does not collect, transmit or share:

• Your name, address, or any identity information
• Passwords, login credentials, or Instagram cookies
• Browsing history or activity on any site other than Instagram pages you open
• Analytics, usage statistics, or telemetry of any kind
• Location data
• Card numbers or payment credentials
• Anything at all sold or handed to advertisers or data brokers

There is no analytics SDK in the extension. Earlier releases briefly included anonymous Google Analytics event reporting; it was removed, and no build currently on the Chrome Web Store contains it.

3. What the extension reads on your device

To do its work, the extension reads the following locally, inside your browser only:

• Instagram page content and API responses — parsed in memory to find the media URLs to download. Not stored, not sent anywhere.
• Your Instagram CSRF token — read from the page so requests to Instagram's own API are made as you, in your own session. It is never stored and never sent to us or to any third party. The extension holds no cookies permission and does not read, create or modify cookies.
• The media files themselves — fetched from Instagram's CDN and written straight to your device through Chrome's download API. They never pass through a server of ours.

4. What is stored on your device

The extension uses Chrome's local storage (chrome.storage.local) to keep:

• Your settings — download concurrency, retry count, ZIP chunk size, filename template, and interface language
• Task state — progress of an active or paused download, so an interrupted job can resume
• Your Pro licence key and its activation state, if you have bought Pro

All of it stays on your machine and is deleted when you remove the extension. None of it is transmitted to us, with the single exception of the licence key when it is verified (§5).

5. Which servers the extension contacts

These are the only hosts the extension is permitted to reach, and they match the host_permissions declared in its manifest:

• www.instagram.com — to query Instagram's API for the media you asked to download
• *.cdninstagram.com, *.fbcdn.net — Instagram's content delivery network, where the files themselves are fetched from
• api.takomi.dev — our licence server, contacted only to activate, check or deactivate a Pro licence key (§6)
• api.polar.sh — the licence API of Polar, our former payment provider, kept reachable so that licences bought there before the migration keep working. No new purchases go through it.

There is no other network destination. Nothing is sent on a schedule, in the background, or without an action of yours.

6. Buying Takomi Pro

Takomi Pro is optional; the free features work without any account. If you do buy it, this is what happens to your data:

• Payment is handled entirely by PayPal, on a checkout page at paypal.takomi.dev. We never see or store your card details or PayPal credentials.
• Your email address is stored on our licence server (api.takomi.dev) together with your licence key and plan, so we can email you the key, verify it later, restore it if you lose it, and — for a monthly or yearly plan — keep it valid while the subscription renews. This is the only personal data we hold.
• Licence checks from the extension send your licence key and an anonymous device fingerprint — a SHA-256 hash of your browser's user agent (major version only), platform, language, timezone and screen size. It exists so the same machine reuses one activation slot instead of consuming a new one after every reinstall. It is not reversible, is not linked to your email in the extension's requests, and identifies no person.
• We send no marketing email. Your address is used for licence delivery and support replies only, and is never shared or sold.

Want your record deleted? Email [email protected] from the address you purchased with and we will erase it. Deleting it also deactivates the licence key attached to it.

7. Why each permission is requested

• downloads — save media files to your device
• storage — keep your settings and resume interrupted tasks
• alarms — wake the service worker so a long download is not killed mid-way
• offscreen — build ZIP archives in a background document
• host access to Instagram and its CDNs — read the page and fetch the media
• host access to api.takomi.dev and api.polar.sh — verify a Pro licence key

The extension requests no other permission, and asks for no broad <all_urls> host access.

8. Remote code

Takomi Saver executes no remote code. Every line of JavaScript it runs ships inside the package you install from the Chrome Web Store.

9. Children

Takomi Saver is not directed at children under 13, and we do not knowingly hold any data from them.

10. Changes

If the extension's data behaviour changes, this page is updated in the same release and the date at the top changes with it.

11. Contact

Questions, deletion requests, or anything at all: [email protected]. A real person answers.