Privacy Policy

This explains what InstaMP3Box does with information when you use instamp3box.com. It’s short because we collect very little, and it’s written to be read rather than to be impressive.

1. What we collect

Links you paste

A URL you submit is used to look up and convert the media. It sits in memory for the length of the request, plus a short cache of about ten minutes so a repeat conversion is quicker, and then it’s gone. We don’t build a history of what you converted, and nothing in that cache is tied to you.

The audio itself

Encoded on the fly and streamed straight to you. It’s never written to disk, and no copy is kept once the transfer finishes.

Request data

Our servers handle your IP address, browser user agent, the page you asked for and a timestamp, the way any web server does. That’s what rate limiting and abuse prevention run on. Those logs are kept for no more than 30 days.

Anything you send us

Use the contact form and we get your name, email and message. We keep them only as long as it takes to sort out whatever you wrote in about.

2. What we don’t collect

• No accounts, so no passwords and no profiles.
• No Instagram credentials. We never ask you to log in, and you shouldn’t enter them on a site like this one.
• No payment details. The service is free.
• We don’t sell or rent personal information to anybody.

3. Cookies

Two kinds, and the banner on your first visit decides the second one.

• Essential. A little browser storage that remembers your cookie choice and whether you picked light or dark, plus any security cookie needed to serve the site. These can’t be turned off without breaking things, and they don’t follow you to other sites.
• Analytics and advertising. Only set if you choose “Accept all”. They tell us which pages are worth keeping and let ad partners measure their own performance. Pick “Essential only” and they’re never set.

Changed your mind? Clear this site’s data in your browser and the banner comes back.

4. Legal bases (GDPR)

• Legitimate interests for running the converter and keeping it from being abused.
• Consent for analytics and advertising cookies, which you can withdraw whenever you want.
• Contract for doing the thing you asked when you submit a link.

5. Third parties

Our hosting provider processes requests for us under a data processing agreement. If you accept analytics and advertising cookies, those providers act as controllers in their own right under their own policies. Contact form messages aren’t shared with anyone outside the team.

6. Where data goes

Requests may be handled in regions outside your own. Where personal data leaves the EEA or the UK we rely on Standard Contractual Clauses or an equivalent recognised safeguard.

7. Your rights

Depending where you live you can ask to access, correct, delete, restrict or port your personal data, object to processing, or withdraw consent. California residents can also ask what’s collected and opt out of “sale” or “sharing”, neither of which we do. Since we hold almost nothing that identifies you, most of these are quick. Email support@instamp3box.com and you’ll get an answer within 30 days.

8. Children

This isn’t aimed at children under 13, or under 16 in the EEA and UK, and we don’t knowingly collect their data. If you think a child has sent us something, tell us and it gets deleted.

9. Security

Everything is served over HTTPS. Because media is never stored, the most sensitive thing we could lose simply doesn’t exist at rest. No system is perfect, but there isn’t much here to take.

10. Changes

If this changes in a way that matters, the date at the top changes too. Carrying on using the site after that means you accept the new version.

11. Contact

Privacy questions go to support@instamp3box.com. If you’re in the EEA or UK and our answer doesn’t satisfy you, you can complain to your local supervisory authority.