Privacy Policy

What reaches our server

Each lookup sends three things to our API:

• The post link you paste. It is used to fetch that post's public page and read the media it lists. The link is never attached to a profile of you.
• Your IP address. Every web request carries one. We use it only to count lookups so a single address cannot run more than 30 a minute and exhaust the service for everyone else.
• Standard request details such as user agent, time and response status, which our hosting provider records in its operational logs.

When you save a file, your browser asks our API for it by post code and file number, along with the post link so an expired cache entry can be refreshed. Our server fetches the file and passes it straight on to you.

What we never collect

• No account details. There is no sign-up, so no name, email address or password. We never ask for your Threads or Instagram login.
• No copies of media. Videos and photos are streamed through and are never written to storage. There is no history of what you downloaded.
• No analytics, ads or tracking tags. The site loads no third-party scripts. Fonts and icons are served from our own domain.
• No clipboard contents. The Paste button reads your clipboard inside your browser, and only when you press it. Copy link in the footer writes to it, and only when you press it.
• No uploaded archives. Download all builds its ZIP file inside your browser and saves it to your device. The archive is never sent anywhere.

Connections to Meta

The media you see comes from Meta Platforms, which runs Threads and Instagram. Whether your browser talks to Meta depends on what you do:

• Looking up a post: our server contacts Threads or Instagram, not your browser. Meta sees a request from our infrastructure.
• Viewing results: preview thumbnails, video playback, the full-size photo view and “open in a new tab” load directly from Meta's content delivery network. Your browser connects to Meta for these, and Meta can see your IP address. Thumbnails and the full-size photo are requested without a referrer.
• Saving a file: single downloads and Download all go through our server, so Meta sees our request rather than yours.

If you would rather your browser never contacts Meta, block images and media for this site; downloading still works. Meta's handling of its own traffic is covered by the Meta Privacy Policy.

Cookies and local storage

Threads Downloader sets no cookies, ours or anyone else's. The only thing our code saves on your device is your light or dark theme choice, stored in your browser's localStorage under the key theme. It never leaves your device and we cannot read it.

Share buttons

The footer's share buttons are ordinary links, not embedded widgets, so the networks they point to receive nothing until you click one. A click opens that network's own share page, and from then on its privacy policy applies.

Service providers

• Cloudflare hosts the website and the API, processes requests on our behalf, and keeps the short-lived metadata cache and operational logs.
• Meta serves the original media, as described above.
• Email providers carry any message you send us.

We do not sell, rent or trade information to anyone.

How long things are kept

• Post details (caption, username, media list and dimensions): cached for about ten minutes so a repeat lookup is quick, then removed automatically.
• Media files: never kept. Streamed, not stored.
• Rate-limit counts: held for the current one-minute window only.
• Operational logs: kept for the hosting provider's standard period and used for security, abuse prevention and fixing errors. Our own error logs record what failed, not a history of your lookups.
• Email: kept as long as needed to answer you, look into a report, protect the service or meet a legal obligation.

Emailing us

If you write to [email protected], your address and message are handled by your email provider and ours, separately from the downloader. Please never send passwords, session cookies, login codes or sensitive personal data.

Your rights

Because there are no accounts, we hold no profile to export, correct or delete. The only records are self-clearing caches, routine logs and any email you send. If you believe we hold information about you, or you want an email conversation deleted, contact us and we will look into it and remove what we find, unless we must keep it by law.

Children

This service is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

When this policy changes in a meaningful way, the date at the top of the page changes too. Continuing to use the site after an update means you accept the revised policy. The Terms of Use and the Copyright & DMCA Policy cover how the service may be used.