Privacy Policy
Last updated 22 August 2026
The short version
Your files are read in your browser and never uploaded. Nothing about who follows you reaches our servers.
To tell you who unfollowed you, we save the usernames from each scan so the next one can be compared. You can delete all of it in one click.
We never ask for your Instagram password and never connect to your account.
1. Who we are
Unfollow Finder is an Instagram unfollow tracker at unfollowfinder.com. It works from the data export Instagram gives you, so we never need your password and never connect to your account. Here's why that matters.
This policy explains exactly what we hold and what we don't. Where the answer differs between the free tool and a Pro account, we say so.
2. The free tool
When you upload followers_1.json and following.json on the homepage, your browser reads both files and compares them on your own device. The files are not uploaded, not transmitted, and not stored. Close the tab and the results are gone.
Nothing about who follows you leaves your device when you use the free tool.
We do record that a scan happened a count and a date tied to your account so we can apply the daily limit. That record contains no usernames.
3. Pro accounts and unfollow tracking
Unfollow detection only works by comparison. To tell you that someone left, we have to know they were there before. That means storing something between scans.
When you run a scan on a Pro account, we store:
- The usernames in your followers and following lists at that moment
- The date of the scan and the totals
- Which usernames appeared or disappeared since your previous scan
We keep your ten most recent scans. Older ones are deleted automatically as new scans replace them.
You can erase every scan, snapshot and tracked change at any time from your dashboard Delete my data. It removes the records immediately and tracking starts fresh from your next scan.
We store usernames only. No profile photos, bios, posts, messages, follower counts of other people, or anything else from their accounts.
4. What we never collect
- Your Instagram password or any login credentials
- Access to your Instagram account, via API or otherwise
- Your card or bank details those go straight to our payment provider
- Your direct messages, photos, posts or comments
- Location data or contacts
We only ever ask for two files. Here's why those two are enough.
5. How we use what we hold
- Running the service : comparing scans, showing your dashboard, exporting your CSV
- Your account : signing you in, applying your plan's limits
- Billing : confirming your subscription is active
- Support : replying when you contact us
- Security : spotting abuse and rate-limiting
We do not sell your data. We do not share it with advertisers. We do not use your followers list to build any kind of profile of you or of the people who follow you.
6. Third parties we rely on
| Service | What it does | What it can see |
|---|---|---|
| Supabase | Database hosting | Your account record and stored scans |
| Whop | Payments and subscriptions | Your email and billing details. We never see your card. |
| Google AdSense | Advertising | Standard ad cookies. No scan data is ever passed to it. |
Each of these has its own privacy policy governing what it does with the data it handles.
7. How long we keep things
- Scan snapshots : your ten most recent scans; older ones are deleted automatically
- Account details : until you ask us to close your account
- Support messages : up to 12 months
- Billing records : as long as tax and accounting rules require
8. Your rights
Wherever you live, you can:
- See what we hold : ask and we'll send it
- Delete your scan data : one click in the dashboard, no request needed
- Close your account : email us and we'll remove your record
- Correct your details : from your account settings
- Take your data with you : export any list as CSV, any time
If you're in the UK or EU, the GDPR gives you these rights formally, and you may complain to your national data protection authority. In California, the CCPA gives you comparable rights. Write to privacy@unfollowfinder.com and we'll respond within 30 days.
9. Cookies
We use a small number:
- Essential : keeping you signed in. The site can't work without these.
- Advertising : Google AdSense sets cookies to serve ads. You can opt out through Google's ad settings.
Your browser settings can block cookies, though signing in won't work without the essential ones.
10. Children
Unfollow Finder isn't intended for anyone under 13. We don't knowingly collect data from children. If you believe a child has created an account, tell us and we'll remove it.
11. Security
Data is held in Supabase (PostgreSQL) and encrypted in transit over TLS. Passwords are hashed with bcrypt and are never recoverable in plain text not even by us.
No system is perfectly secure. If a breach ever affected your data, we would tell you.
12. Changes to this policy
When we change how we handle data, we update this page and the date at the top. For anything significant, we'll email you. The most common reason for a change is a new feature as happened when unfollow tracking was added, which is why section 3 exists.
13. Contact
Questions about anything here:
- Privacy: privacy@unfollowfinder.com
- Everything else: our contact page
Want your data gone?
Everything we've stored for you can be deleted from your dashboard. No form, no waiting.
Open dashboard