Privacy Policy
October 13, 2026
iStoryTracker is operated by Zhang Tao, an individual operator based in China. Contact: support@istorytracker.com.
Scope and contact
The operator of the iStoryTracker service is responsible for the personal-data processing described in this Privacy Policy when you visit the website, create an account, purchase membership, use public-profile research tools, or contact support. Privacy questions and requests may be sent to support@istorytracker.com.
Information we process
We process account identifiers, email address, authentication-provider identifiers and profile information returned during sign-in, session records, membership status, service usage records, payment status and checkout identifiers, support messages, public Instagram usernames you submit, query results, Story tracking settings, archived public Story media and metadata, notification records, and security and technical logs. Payment card details are handled by Waffo Pancake rather than stored by iStoryTracker.
Public-profile sources and boundaries
Public-profile research data may come from publicly accessible pages and third-party public-profile data providers. The service is limited to information made publicly available for public accounts; it does not request your Instagram password or provide access to private accounts, private messages, or hidden interactions. Do not use results for unlawful surveillance, harassment, spam, or inference of sensitive traits. Availability and accuracy depend on the public source and upstream provider.
Automatically collected data and cookies
Essential cookies and technical records support authentication, security, checkout, rate limiting, and service delivery. This site does not currently enable non-essential analytics or advertising trackers.
Purposes and legal bases
We process information to create accounts, provide queries and Story tracking, maintain paid access, process purchases, provide support, prevent fraud and abuse, secure and maintain the service, and meet applicable accounting, tax and legal obligations. Where consent or another legal basis is required, processing must satisfy the applicable requirements.
Service providers and recipients
We use Cloudflare Workers for hosting, D1 for account and application records, R2 for private archived media, and Cloudflare Email Sending and Email Routing for transactional mail and support forwarding. Apple, and Google when enabled, process sign-in through their native authentication services. Waffo Pancake processes checkout and payment administration. SocialAPI supplies public Instagram profile, Story and Post data. Each provider receives the information needed for its role. We do not sell personal information.
International transfers
Some providers may process data in countries other than your own. Where data-protection law requires a transfer mechanism, transfers must rely on an applicable adequacy decision, contractual or other legally recognized safeguard, or a permitted statutory exception. Contact support@istorytracker.com to request information about the mechanism applicable to a particular provider.
Security and retention
We use access controls, encrypted transport, provider security features, and limited operational access. No online service can guarantee absolute security. Retention depends on the record category, the duration of your account or service relationship, and what is reasonably necessary for service delivery, accounting and tax obligations, security and fraud prevention, dispute handling, and legal compliance. Contact support@istorytracker.com for information about the criteria applicable to a particular record category.
Story tracking and archived media
When you enable Story tracking, we store the selected public Instagram username, check status, public Story metadata, archived public Story media, and notification records. Scheduled tracking requires active paid access. Archived media has a retention window extending 30 days beyond the applicable paid access period. Historical records may be retained longer where reasonably necessary for security, billing disputes, accounting, or legal obligations.
Your privacy rights
Depending on your location and applicable exceptions, you may request access, correction, deletion, restriction, or portability, object to certain processing, and withdraw consent at any time. You may also lodge a complaint with your local data protection authority. We may verify your identity before acting on a request.
Contact and complaints
Send privacy requests, consent-withdrawal requests, or security concerns to support@istorytracker.com and include the account email when relevant. You may contact the data protection authority in the country or region where you live, work, or believe an infringement occurred.