Skip to main content
Gramhir

Privacy policy

Last reviewed

The short version

There is no account to create on gramhir.net, and the usernames people check are not recorded by us. The site shows no ads and uses no cookies for tracking or advertising. The sections below explain the few places where data does pass through, and why.

Kept on this device only

Your recent list holds the last 10 usernames you checked. Your browser keeps it in local storage, and nothing in it is sent to us. The “Forget these” button beside the list wipes it. In a private window it disappears on closing. During a browser session the page also holds a short-lived pass from the anti-abuse check, so the check is not repeated on each search. A small script, the service worker, keeps copies of this site’s pages so they still open offline; it never stores profiles you opened.

What happens during a lookup

Every search opens an address that carries the username, in the form /?u=name. As with any web address, our hosting network, Cloudflare, sees that request and may keep it in routine logs.

Next, your browser requests the profile from our service. The service fetches it via a data supplier outside the site, which in turn gets it from Instagram. The supplier receives the username and our server’s request, not your IP address, and may keep the username in its own logs. Public profile data may sit in our service’s memory for a short while, from a few minutes up to about an hour, so a repeat lookup does not fetch it again. It is never written to disk and is not linked to who asked.

Photos and videos often load straight from Instagram’s image servers, which then see your IP address in the usual way. Avatars, highlight covers and every file you save come through our site instead.

Abuse protection

To keep the service usable for everyone, the site limits how many lookups one connection can make. It counts them under a one-way code derived from your IP address; the address itself is not stored. After heavy use the page may show a Cloudflare Turnstile check, and Cloudflare’s privacy policy governs how that check handles data. Our service counters record totals such as lookups and errors, never a username itself or your IP address.

Services involved

  • Cloudflare: hosting, network delivery, the Turnstile check.
  • Data supplier: retrieves the public profiles our service asks for.
  • Instagram’s image servers: deliver many of the photos and videos you open.

We sell no data and share nothing beyond what is described here. Should that change, the notice appears on this page first, under a new revision date.

Your requests

You can ask what data about you we hold, and request its correction or deletion. Usually nothing we hold identifies you, and we say so in a written reply. Write to contact@gramhir.net. You also have the right to complain to the data regulator of your own country.