Hekasoft

Summary

Hekasoft Insta Downloader is a browser extension that runs entirely on your device. It does not collect, transmit, store on remote servers, or share with any third party any of your personal data, browsing data, or usage data. There are no analytics, no telemetry, no tracking. All operations happen locally in your browser.
This privacy policy explains what data the extension touches, where that data lives, and what we do (and do not do) with it.

Who We Are

The extension is developed and maintained by Hekasoft (https://www.hekasoft.com). For any privacy-related question you can contact us at info@hekasoft.com.

What data HekaCopy handles

To perform its function, the extension needs to interact with the website instagram.com while you are browsing it in your own session. Specifically, the extension may access:
Instagram session cookies (read-only, only when you click a download button). These are used to authenticate the network calls to Instagram’s own internal API, the same API that Instagram itself uses to display content in your browser. The extension does not send these cookies anywhere else.
Public Instagram content visible in your browser: photos, videos, reels, stories, highlights, captions, usernames, and post identifiers of the content you choose to download.
Your locally configured preferences: language, download folder name, file naming scheme, optional list of Instagram usernames you want to track for periodic local downloads (“subscriptions”). These preferences are stored in your browser’s local storage.
The extension does not access:
Your Instagram username or password (we never see your login credentials)
Other browser tabs or websites different from instagram.com
Your browsing history outside Instagram
Files on your computer (other than writing the downloaded media to the folder you configured)

Where the data is stored

Chrome: All data the extension handles is processed and stored exclusively on your local device:
Downloaded files are saved to your browser’s Downloads folder, in the subfolder you configured (default: Downloads/InstaDownloader/).
Preferences and the list of subscribed profiles are saved in chrome.storage.local, which is a per-device local storage. This data does not leave your device and is not synced to the cloud.
Network requests made by the extension go only and exclusively to instagram.com and Instagram’s CDN domains (cdninstagram.com, fbcdn.net) to fetch the media you requested. No data is sent to Hekasoft servers, third-party analytics, or any other domain.

Firefox: All data the extension handles is processed and stored exclusively on your local device:
Downloaded files are saved to your browser’s Downloads folder, in the subfolder you configured (default: Downloads/InstaDownloader/).
Preferences and the list of subscribed profiles are saved in storage.local, which is a per-device local storage. This data does not leave your device and is not synced to the cloud.
Network requests made by the extension go only and exclusively to instagram.com and Instagram’s CDN domains (cdninstagram.com, fbcdn.net) to fetch the media you requested. No data is sent to Hekasoft servers, third-party analytics, or any other domain.

Permissions explained (Chrome)

The extension requests the following Chrome permissions, each used only for the function described:

  • storage: to save your local preferences and your subscriptions list on this device.
  • downloads: to write downloaded media files to your computer’s downloads folder.
  • cookies: to read your Instagram session cookies when you click a download button, so the extension can authenticate the request to Instagram’s API in the same way the Instagram website itself does.
  • alarms: to schedule the pauses between profiles when you download a batch of subscriptions, so we don’t overload Instagram’s API.
  • tabs: to detect whether you have an Instagram tab open and to open Instagram from the popup.
  • webRequest: to add the headers required by Instagram’s internal API on requests originated by the extension itself.
  • host_permissions for *.instagram.com: to enable the content script that adds the download buttons on Instagram pages and to send authenticated requests to Instagram’s API. The extension does not have permission to access any other website.

Permissions explained (Firefox)

The extension requests the following Firefox permissions, each used only for the function described:

  • storage: to save your local preferences and your subscriptions list on this device.
  • downloads: to write downloaded media files to your computer’s downloads folder.
  • cookies: to read your Instagram session cookies when you click a download button, so the extension can authenticate the request to Instagram’s API in the same way the Instagram website itself does.
  • alarms: to schedule the pauses between profiles when you download a batch of subscriptions, so we don’t overload Instagram’s API.
  • tabs: to detect whether you have an Instagram tab open and to open Instagram from the popup.
  • webRequest: to add the headers required by Instagram’s internal API on requests originated by the extension itself.
  • host_permissions for *.instagram.com: to enable the content script that adds the download buttons on Instagram pages and to send authenticated requests to Instagram’s API. The extension does not have permission to access any other website.

Data we collect on our servers

None. Hekasoft operates no servers that receive any data from this extension. There is no analytics service, no error reporting, no usage statistics, no remote logging. The extension is a fully client-side tool.

Data sharing with third parties

None. We do not share, sell, license, or transfer any user data to third parties because we have no user data to share — we never collect any.

Your rights

Because we collect no data:

  • There is no data to access, export, or delete on our side.
  • You have full local control over the downloaded files and the extension’s local preferences. You can delete them at any time by uninstalling the extension or clearing your browser’s local storage for the extension.
  • You can opt out of any feature simply by not using it. The extension does not enable any feature without your explicit interaction.

Children’s privacy

The extension is not designed for, marketed to, or intentionally used by children under the age of 13. We do not knowingly collect data from children (and in fact we collect no data at all). If you believe a minor is using the extension, the same protections apply as for any other user: no data is collected.

Changes to this policy

If we update this privacy policy in the future, we will publish the new version at the same URL and update the “Last updated” date at the top. Substantive changes will be communicated through the extension itself and through the Chrome Web Store listing.

Contact

For any question, request, or concern related to privacy, contact us at info@hekasoft.com.

This privacy policy is intentionally short because the extension does very little with your data. If you spot an inaccuracy or want clarification on any specific behavior, write to us — we welcome the scrutiny.

Last update date: 2 May 2026