Privacy policy
Last updated 2026-11-14
This policy explains what UnfollowWatch (“we”) collects, why, and the choices you have. The service is operated by UnfollowWatch. Contact: unfollowwatch@gmail.com.
The short version
- We never ask for, receive or store your Instagram password, cookies or session tokens.
- When you scan with the bookmark (Scan in any browser) or upload a data export, your latest follower list is kept with your account so the next scan can be compared. Only the latest list is kept.
- We do not sell personal data and do not use it for advertising profiles.
- You can delete your account and stored data at any time from Settings.
Information we collect
| Category | What | Why |
|---|---|---|
| Account | Email address, password hash (handled by our authentication provider), timezone, optional display name. If you sign in with Google: the name, email address and profile picture Google shares from your Google account | To provide your account and send the emails you choose |
| Monitored Instagram accounts | The Instagram username(s) you connect, follower counts, scan history (times, status, counts) | To show your dashboard and enforce scan pacing |
| Follower changes | Handles (and display names where shown) of accounts that started or stopped appearing in your follower list, username changes, and detection times | The core service: alerts and history |
| Imports (optional) | If you upload an Instagram data export, the most recent follower list from it (and, if included, the accounts you follow) | To compare the next import with this one. Only the latest list is kept. |
| Bookmark scans (optional) | If you scan with the “Scan in any browser” bookmark, the handles in your own followers list and the follower count Instagram showed | To compare the next scan with this one. Only the latest list is kept. |
| Billing | Subscription status and plan. Card details are handled by Stripe and never reach our servers. | Payments and entitlements |
| Security & usage | Audit log of sensitive account actions; first-party product events (e.g. “account connected”) without follower data | Security, abuse prevention, improving the product |
Scan in any browser (bookmark)
The “Scan in any browser” bookmark works on computers and phones without installing anything. It reads only your own followers list on instagram.com, only during a scan you start (it scrolls the list for you), and never your password, cookies or messages. When you finish, it sends the list of handles and the follower count to your account, where the latest list is kept so the next scan can be compared. You can erase it with your account's history.
Advertising (Google AdSense)
When advertising is switched on, some public guide and tool pages show ads from Google AdSense. There are no ads in the dashboard or in emails, and paid subscribers do not see ads.
- Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
- Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet. Learn more about how Google uses information from sites that use its services.
- The cookies of other third-party vendors or ad networks, which Google allows to serve ads through AdSense, may also be used to serve ads on this site.
- You can opt out of personalised advertising in Google's Ads Settings, and opt out of other vendors' use of cookies for personalised advertising at www.aboutads.info.
- In the EEA, the UK and Switzerland, ads only use cookies after you agree in Google's consent message.
Processors we use
- Supabase — database and authentication hosting
- Vercel — web hosting
- Stripe — payments
- Resend — transactional email delivery
- Google AdSense — only on some public article and tool pages, only if enabled, never for paid subscribers, never in emails
Retention
- Follower change history: until you erase it or delete your account. Free plans display the last 30 days.
- Notification delivery records: 180 days. Audit log: 2 years. Product analytics events: about 13 months.
- Rate-limit records: deleted daily.
Your rights and choices
- Change email preferences (transactional alerts and marketing are separate; marketing is off by default).
- Disconnect Instagram accounts.
- Erase an account's history, or permanently delete your account — see Data deletion.
- Request access to or correction of your data by emailing us.
Cookies
We use essential cookies for sign-in and preferences. See the cookie policy.
Children
UnfollowWatch is not intended for children under 16 (or the minimum age required where you live).
Changes
We will post updates here and, for material changes, notify you by email.