Lurkrr
Zurück

Datenschutzrichtlinie

Zuletzt aktualisiert: November 2026

1. Information We Collect

Lurkrr is designed with privacy as a core principle. We collect only what is needed to run the Service:

  • Searches: We do not store the usernames you look up or type into the search box, and we do not build a browsing history. Lookups are answered from a short-lived cache (see Data Retention).
  • IP addresses: We never write visitor IP addresses to our database. Your IP is used briefly in memory to apply rate limits and bot protection.
  • Server logs: Our servers keep technical logs (errors, timings, which features were used) for up to 60 days to operate and secure the Service. They are not used to profile visitors.
  • Pro subscribers: We store your email address, your Stripe customer and subscription IDs, and the subscription status. Card details are handled by Stripe and never reach us. If you set up story monitoring, we also store the accounts you monitor and the webhook address or email you gave for notifications.
  • Delisting requests: We store the username, your email address, your stated reason and the language of the page you used, to review the request and email you about it.

2. Cookies & Local Storage

  • Pro token: If you have Pro, a signed, short-lived token is kept in your browser's local storage so the site remembers your subscription. It contains no payment details and is removed when it expires or the subscription ends.
  • Cloudflare: Our network provider may set strictly necessary cookies for bot detection (Turnstile) and attack protection.
  • Advertising cookies: Visitors who are shown ads may receive cookies or similar identifiers from Google, and a cookie that records their consent choice. See Advertising below. Visitors without ads (for example Pro subscribers) receive none of these.

We do not use analytics or tracking cookies of our own.

3. Advertising

The free version of Lurkrr is funded by ads served through Google Ad Manager. When an ad is shown, your browser connects to Google, which receives your IP address, browser and device information and the page you are on, and may read or set cookies or similar identifiers. Google uses this to choose, measure and limit ads and to prevent fraud. Pro subscribers are not shown ads, and no ad script is loaded for them.

  • Consent (EEA, UK and Switzerland): Before ads are personalized or advertising cookies are used, a consent message asks for your choice. If you decline, you may still see non-personalized ads, which use cookies only for frequency capping, fraud prevention and measurement where the law allows.
  • California and other US states: Personalized advertising can count as "sharing" personal information. You can opt out with the settings button below. We do not sell personal information for money.
  • More control: You can manage Google's ad personalization at adssettings.google.com and read how Google uses data at policies.google.com/technologies/partner-sites.

4. Third-Party Services

  • Cloudflare: Network, DNS, attack protection and Turnstile bot detection.
  • Stripe: Payment processing for Pro. Stripe's privacy policy governs payment data.
  • Google: Ad Manager and its consent message, for visitors who are shown ads.
  • Resend: Sends our emails, such as Pro restore links and delisting updates.

5. Data Retention

  • Instagram content we look up (profile details, media links, search suggestions) is cached for between 3 minutes and 24 hours, and media files for up to 2 hours. We keep no permanent copies of Instagram content.
  • Server logs are kept for up to 60 days.
  • Pro subscription data is kept while the subscription is active and afterwards for as long as accounting and tax law require.
  • Approved delisting requests are kept for as long as the profile stays delisted, so it remains hidden.

6. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the following rights:

  • Right of Access: Request a copy of any personal data we hold about you.
  • Right to Erasure: Request deletion of your personal data.
  • Right to Rectification: Request correction of inaccurate personal data.
  • Right to Object: Object to processing of your personal data.
  • Right to Portability: Request transfer of your data in a machine-readable format.
  • Right to Opt-Out (CCPA): California residents may opt out of the sale or sharing of personal information (see Advertising).

To exercise any of these rights, contact us at [email protected].

7. Instagram Account Owners

If you are the owner of an Instagram account displayed on our Service, you may request removal (delisting) at any time via our Remove Profile page. We honor all verified delisting requests within 24-48 hours.

8. Children's Privacy

The Service is not directed at children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Your continued use of the Service constitutes acceptance of the revised policy.

10. Contact

For privacy-related inquiries, please contact us at [email protected].