Privacy policy

Last updated 16 August 2026

StoryPeeker is built so that very little about you ever reaches it. This page explains what that means in practice.

1. What We Do Not Collect

There is no sign up on this site, so most of what a website would normally hold about a visitor simply never arrives. We do not ask for or receive:

• Your name, address or phone number
• Your email address, unless you write to us yourself
• Instagram login details. The tool has no sign in step and no use for a password
• Payment details, because nothing here is charged for

Any site in this category that asks for your Instagram password is trying to take the account. A viewer that only reads public profiles never needs one.

2. What We Do Collect

The username you type is sent to our server, used to fetch the public profile, and returned to your browser with the result. It is not filed against you afterwards.

The result is held briefly in your browser's own session storage so that pressing back does not trigger a second lookup. That copy stays on your device and clears when you close the tab.

Our web server keeps ordinary request records, which include the IP address, the time of the request and the browser identifier. Every web server does this, and it is what allows the service to stay online and to block automated abuse.

3. Cookies and Local Storage

Session storage is used for the two purposes described above. It can be read only by this site and it is discarded the moment the tab closes.

The only cookies set here belong to Google Analytics, described in the next section. Nothing else on this site sets a cookie, and none are used to build a profile of you or to target advertising.

4. Analytics

We use Google Analytics to count visits and see which pages people arrive on. It tells us how many visitors a page gets and roughly where in the world they are. It does not tell us who you are, and the usernames you search are never sent to it.

Google Analytics sets cookies in your browser, named _ga and _ga_ followed by a code, which let it recognise a repeat visit without knowing your identity. That data is handled by Google under its own privacy policy.

If you would rather not be counted, any browser setting that blocks third party cookies will stop it, as will Google's own opt out add on. The tool works exactly the same either way.

5. Advertising

No advertising runs here at present. If that changes, this page will say so before any advertising code goes live, and the networks involved will be named so you can read their own policies.

6. Data Security

Traffic to and from this site is encrypted. Because there are no accounts, there is no password database to steal, which removes the largest risk a site of this kind would otherwise carry. No system is perfectly secure and we make no claim otherwise.

7. Third-Party Content

Stories are delivered by Instagram's own servers, so viewing one means your browser talks to them directly. That exchange is covered by Meta Platforms, Inc.'s privacy policy rather than this one.

8. Children's Privacy

This site is not aimed at children under 13 and we do not knowingly collect anything from them. If you believe a child has sent us information, email us and it will be deleted.

9. Requests

If you want to know what we hold about you, or want something deleted, email us and we will deal with it. Usually the answer is that there is nothing to send, because the service is built so that little accumulates in the first place.

10. Changes to This Policy

This page may be updated. The date at the top always shows the current version, and anything significant will be described here rather than changed quietly.

11. Contact

Questions about this policy can be sent through the contact page.