Effective November 6, 2026. This policy covers the InstaFli Instagram Downloader browser extension and its interaction with instafli.com. Versions before 0.3.6 also supported the former stashwing.com website.
You supply an Instagram link on InstaFli. The extension uses that link and, when needed, the target username or account identifier to request the selected media from Instagram in your browser. Version 0.3.7 and later reuses an existing signed-in Instagram tab without opening, navigating or closing tabs during searches. Earlier versions could temporarily create an inactive Instagram homepage tab and close it afterward.
Only media available to your Instagram account can be returned. Instagram's existing request and CSRF tokens are used inside Instagram's page context to authenticate requests to Instagram. The extension does not ask for your password, copy login cookies to InstaFli, or return authentication tokens to the InstaFli page.
The requested media URLs, thumbnail URLs, media type and dimensions are passed locally to the InstaFli page to show previews. Results are kept in the page's memory and in the extension's temporary chrome.storage.session storage, scoped to the requesting InstaFli tab. Download records are valid for 30 minutes; an expired record is not used for downloads. Records are removed when the tab closes or a new search replaces them. Closing the browser clears extension session storage. The extension does not upload these results to an InstaFli server.
To avoid repeated requests, the extension may reuse successful results for 60 seconds across InstaFli tabs in the same browser and Instagram account. A numeric Instagram account identifier is read locally to separate this cache; it is not an authentication token and is not sent to InstaFli. Up to 20 recent searches are retained in temporary session storage; expired or other-account cache entries are discarded on the next search, and browser exit clears them. A temporary search-lock timestamp prevents overlapping requests. Version 0.3.8 and later stops rejected requests without automatic retries or an extension-imposed timed lockout; earlier versions stored cooldown timestamps. There is no daily usage quota.
Previews, opening media and downloads contact Instagram's media hosts directly. These requests disclose the usual network information, including your IP address, to those hosts. Downloaded files stay on your device until you delete them and are subject to your browser's normal download/history settings.
The extension does not request the browser's general browsing-history permission. It checks eligible Instagram tabs only to locate a context for your request. It does not read unrelated websites or run automatic account monitoring.
The extension contains no advertising or analytics code. We do not sell extension user data, use it for advertising or unrelated profiling, or use it to determine creditworthiness or for lending. Data is handled only to provide the search, preview and download functions described here. Visiting instafli.com produces ordinary web-server requests and access logs; this is separate from the extension's local Instagram session and media-result handling.
You choose when to search and download. Close the InstaFli tab to remove its extension result record, sign out on Instagram to end that Instagram login, or disable/uninstall the extension through your browser's Extensions page. Uninstalling does not delete files you already downloaded. Instagram and Google/your browser provide their own privacy policies and controls.
For extension questions or privacy requests, email info@instafli.com. This page will be updated if the extension's handling changes. InstaFli is independent of Instagram and Meta.