Privacy Policy & GDPR Transparency Notice

Welcome to Download It ("we", "us", or "our"). This Privacy Policy and General Data Protection Regulation (GDPR) Transparency Notice explains how personal data and technical information are processed when you access or use the Download It website (downloadit.in), the Download It Android application (in.downloadit.app / com.downloadit.app), and all associated tools, services, and backend APIs (collectively, the "Service").

We are committed to data minimization, privacy by design, and strict transparency. Please read this Privacy Policy carefully to understand our data protection practices and your rights under applicable privacy legislation, including Regulation (EU) 2016/679 (EU General Data Protection Regulation or "GDPR"), the UK GDPR, and the Directive on Privacy and Electronic Communications (ePrivacy Directive 2002/58/EC as amended).

1. Data Controller Identity and Contact Details

For the purposes of Article 4(7) and Article 13 of the GDPR and other applicable data protection legislation:

• Data Controller: The Download It team / operators of downloadit.in.
• Primary Privacy & Data Protection Email: downloadit45@outlook.com (Please use the subject line: [GDPR / Privacy Inquiry])
• Online Inquiries & Support: Accessible through our official Contact Page.
• Data Protection Officer / Representative: Inquiries regarding our data handling practices or requests to exercise your data subject rights should be directed to our privacy team at downloadit45@outlook.com.

2. Legal Bases for Processing Personal Data (GDPR Article 6)

Under Article 6 of the GDPR, processing of personal data (such as temporary IP addresses, network headers, and voluntarily submitted URLs) must be justified by an established legal basis. The table below delineates the specific legal grounds we rely upon for each operational activity:

3. Clarification of Temporary Media Storage: Transitory Processing vs. Permanent Hosting

To avoid any ambiguity regarding the technical operation of Download It, we explicitly distinguish transitory technical processing from permanent media hosting:

• No Permanent Hosting: Download It is strictly a client-initiated technical utility. We do NOT host, archive, index, publish, broadcast, or permanently store any user-downloaded media files on our servers or cloud infrastructure. We do not provide user cloud storage, public directories, or persistent file-sharing links.
• Direct CDN Extraction (Zero Server-Side Storage): Where technically supported, our backend retrieves direct content delivery network (CDN) links from the source platform and returns them immediately to your client. In this pathway, media streams directly from the third-party CDN to your browser or device storage without ever being written to or buffered on our server disks.
• Transitory Ephemeral Processing (Up to 10 Minutes Lifespan): In specific instances where source media cannot be retrieved directly (such as multi-item carousels requiring client packaging into a single ZIP archive, or multiplexing split video/audio streams), media fragments are temporarily buffered in an isolated, volatile scratch directory on our processing server.
• Automated Expungement: Any temporary media assets, unpack directories, and associated processing tokens created during temporary server-side processing are subject to an automated retention period of up to 10 minutes. An automated cron background cleanup worker executes continuously to permanently unlink, delete, and erase expired files from backend storage. Once delivered or upon expiration of the 10-minute window, the media files cease to exist on our servers.

4. Information We Process & Data Minimization

We adhere to the principle of data minimization (Article 5(1)(c) GDPR). We do not collect names, residential addresses, payment details, government IDs, biometric data, or private user credentials.

• Submitted URLs: When you paste a URL into our interface, the URL is processed solely to locate and extract the requested public media content. Public URLs may contain inherent public identifiers, such as post shortcodes or public profile handles.
• Technical Connection Data: As with standard internet communications, your web browser or application transmits standard HTTP headers (including IP address, User-Agent, and referrer). IP addresses are used in transient volatile memory to route requested responses and enforce rate limits, and are sanitized or truncated in persistent error logs.
• No Account Credentials: Download It does not support user accounts. We never ask for, collect, store, or transmit your Instagram passwords, OAuth tokens, two-factor authentication codes, or session cookies.

5. Cookies, Tracking Technologies & Consent Requirements

This section details our use of cookies and local storage in compliance with the EU ePrivacy Directive (Directive 2002/58/EC) and Article 6(1)(a) of the GDPR.

A. Strictly Necessary & Functional Local Storage (Consent Exempt)

Our website utilizes local storage strictly to ensure core user experience and interface functionality. These keys do not track you across external websites and are exempt from cookie consent requirements under Article 5(3) of the ePrivacy Directive:

• downloadit_theme: Remembers your selected dark or light mode interface theme.
• downloadit_mode: Stores your client-side download pathway preference (Fast Download vs. Original Quality).
• downloadit_cookie_consent: Stores your cookie consent decision (accepted or declined).

B. Non-Essential Third-Party Advertising Cookies (Google AdSense)

The Download It website displays advertisements served by Google AdSense (Publisher ID: ca-pub-5960603066238647). Google and its certified vendor partners use cookies (such as DoubleClick cookies) and similar identifiers to serve personalized or non-personalized advertisements based on your prior visits to this and other websites.

• Consent Requirement for EU/EEA & UK Users: In compliance with the GDPR and Google's EU User Consent Policy, non-essential advertising cookies and personalized ad targeting are not deployed without prior affirmative consent from users located in the European Economic Area (EEA), the United Kingdom, and Switzerland.
• Consent Management: When you first visit our site, our Cookie Consent Notice provides you with clear, granular options to "Accept All" or "Decline Non-Essential" cookies. If you choose "Decline Non-Essential", non-personalized advertising parameters (requestNonPersonalizedAds = 1) are applied.
• Managing & Revoking Ad Consent: You may modify your advertising preferences, withdraw your consent, or disable targeted cookies at any time via:
  • Google Ads Settings
  • Your Online Choices (EU/EEA Consumer Opt-Out)
  • Network Advertising Initiative (NAI) Opt-Out
  • Your web browser's native settings (blocking third-party cookies or clearing local site data).

C. Separate Assessment for the Download It Android Application

The Download It Android application (in.downloadit.app) operates independently from the website with respect to tracking:

• The Android application does not include third-party advertising SDKs (such as Google AdMob, Unity Ads, or AppLovin).
• The Android application does not bundle behavioral analytics or crash telemetry SDKs (such as Firebase Analytics, Adjust, AppsFlyer, or Crashlytics).
• The Android application does not read or collect the Google Advertising ID (GAID), device IMEI, MAC address, or contacts.
• Future App Consent Safeguards: Should advertising or analytics SDKs be incorporated into future versions of the Android app, a dedicated in-app Consent Management Platform (such as the Google User Messaging Platform / UMP SDK) will be implemented to collect explicit, affirmative consent from European users prior to SDK initialization.

6. Information Stored on Your Android Device

When you download media using our Android application, content is stored directly on your personal device:

• Media is saved to standard public media collections in Android MediaStore (Movies/Download it or Pictures/Download it) in compliance with Android Scoped Storage.
• Download history, captions, and source URLs are persisted locally in an on-device SQLite Room database. This data resides solely on your physical device and is never transmitted back to our servers. You maintain exclusive control over your saved media and local history, and can delete items at any time through the app or device file manager.

7. International Data Transfers (GDPR Articles 44–49)

Our server infrastructure, CDN edge points, and cloud service providers (such as Amazon Web Services - AWS EC2) may be located in jurisdictions outside the European Economic Area (EEA), including the United States.

Where personal data (such as transient IP addresses in server connection logs) is transferred to countries not recognized by the European Commission as providing an adequate level of data protection under Article 45 GDPR, we ensure that appropriate safeguards are in place in accordance with Article 46 GDPR. These safeguards include entering into Standard Contractual Clauses (SCCs) approved by the European Commission or relying on certified data protection frameworks such as the EU-U.S. Data Privacy Framework.

8. Your Data Subject Rights Under the GDPR

If you are a resident of the European Economic Area (EEA) or the United Kingdom, you have comprehensive statutory rights under Chapter III of the GDPR:

• Right of Access (Article 15 GDPR): You have the right to request confirmation as to whether we process your personal data and obtain a copy of that data.
• Right to Rectification (Article 16 GDPR): You have the right to request the correction of inaccurate or incomplete personal data.
• Right to Erasure / "Right to be Forgotten" (Article 17 GDPR): You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected or where you withdraw your consent.
• Right to Restriction of Processing (Article 18 GDPR): You have the right to request that we restrict processing of your data under certain circumstances (e.g. while accuracy is verified).
• Right to Data Portability (Article 20 GDPR): You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Article 21 GDPR): You have the right to object at any time to processing based on our legitimate interests (Article 6(1)(f) GDPR).
• Right to Withdraw Consent (Article 7(3) GDPR): Where processing is based on consent (such as advertising cookies), you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Rights Regarding Automated Decision-Making (Article 22 GDPR): Download It does not employ automated profiling or decision-making systems that produce legal or similarly significant effects.

How to Exercise Your Rights: Because Download It does not maintain user accounts, you may exercise your rights by contacting our privacy team at downloadit45@outlook.com. We will respond without undue delay and at the latest within one calendar month (30 days), free of charge.

9. Right to Lodge a Complaint with a Supervisory Authority (GDPR Article 77)

In accordance with Article 77 of the GDPR, if you are located in the European Union or the United Kingdom and believe that our processing of your personal data violates applicable data protection regulations, you have the right to lodge a complaint with a competent Data Protection Supervisory Authority.

You may lodge a complaint in the EU Member State of your habitual residence, your place of work, or the place of the alleged infringement. You can find contact information for your national Data Protection Authority through the following official directories:

• European Union (EU/EEA): European Data Protection Board (EDPB) Member Directory
• United Kingdom (UK): Information Commissioner's Office (ICO)

10. Third-Party Platforms and Copyright Restrictions

Download It is an independent utility and is not affiliated with, sponsored by, or endorsed by Instagram or Meta Platforms, Inc. We encourage users to review the privacy policies of external platforms. When you submit a public post URL, technical requests are routed to public CDN endpoints solely to fulfill your download instruction. For detailed rules regarding copyright compliance, statutory private copying exceptions, and our formal Notice-and-Takedown procedure, please consult our Terms & Conditions.

11. Data Security & Retention

We implement appropriate technical and organizational measures (TOMs) to secure all data in transit and at rest:

• All network communications between clients and our production API are encrypted using modern Transport Layer Security (TLS 1.2 / TLS 1.3).
• Temporary server-side processing files and working buffers are kept in isolated, non-public storage directories and automatically purged within up to 10 minutes.
• Operational server logs (containing sanitized technical connection metadata) are stored separately from media processing directories, accessible only to authorized administrators, and rotated periodically for security diagnostics.

12. Children's Privacy

Download It is intended for individuals aged 13 and older (or 16 where required under EU Member State law). We do not knowingly collect personal data from children under these age thresholds. If you believe a child has provided us with personal information, please notify us immediately at downloadit45@outlook.com, and we will take prompt steps to delete such data.

13. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect technical enhancements, architectural updates, or evolving legal and regulatory standards. Any modifications will be posted on this page with an updated "Last Updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions, feedback, or legal inquiries concerning this Privacy Policy, our data handling practices, or your statutory privacy rights, please contact our team:

• Email: downloadit45@outlook.com
• Subject Line: [Privacy Inquiry / GDPR Request]
• Web Support: Contact Support Page
• Terms of Service: Terms & Conditions