Tidyfollow Privacy Policy

The short version

Tidyfollow works on your own Instagram account, inside your own browser. Your Instagram data — who you follow, who follows you, and the actions you run — goes only to instagram.com. We never ask for your Instagram password. The only things that ever reach us are a licence check if you buy Pro, and your answers if you fill in the optional uninstall survey.

Your Instagram data

Tidyfollow uses the Instagram session you are already logged in to in Chrome, and Instagram’s own web endpoints — the same ones instagram.com uses when you click Follow or Unfollow yourself.

• •Signed-in account: Tidyfollow reads Instagram’s ds_user_id cookie in your browser to know which account is signed in and to notice when you switch accounts. It is never sent anywhere.
• •Following and followers lists: read from instagram.com into your browser so Tidyfollow can sort them (for example, accounts that don’t follow you back). They are never sent to us or to anyone other than instagram.com.
• •Actions you choose to run (unfollow, follow back, remove follower): sent directly from your browser to instagram.com, exactly as if you had clicked the button yourself.
• •No passwords, no email addresses, no direct messages, and no content from other people’s accounts.

What is stored on your device

Scan results, scan history (used to show who unfollowed you and who is new), your settings (pace, per-run limit, keep list), and a log of actions you ran are saved with Chrome’s local extension storage.

• •They stay on your device and are kept separately for each Instagram account you use.
• •They are never uploaded, sold, shared, or used for advertising or profiling.
• •Uninstalling Tidyfollow deletes them.

If you activate Pro

When you paste a licence key into Tidyfollow, it is checked so Pro can switch on, and re-checked from time to time so a cancelled subscription stops.

• •What is sent: your licence key and a random install identifier created on your device when Tidyfollow was installed. The identifier is not linked to your Instagram account and contains nothing about you.
• •Where it goes: our licence server, which runs on Cloudflare Workers. It asks Freemius whether the key is valid. Nothing about your Instagram account or lists is ever part of this.
• •Freemius is our payment processor and merchant of record. When you buy Pro, you pay on Freemius’s checkout, and Freemius receives your name, email address and payment details under its own privacy policy (freemius.com/privacy). We never see your card details.

Uninstall survey

If you remove Tidyfollow, Chrome opens a short, optional feedback page on tailsgate.com. Closing the tab sends no answer.

• •When the page opens: the version you had and the same random install identifier.
• •If you answer: the reason you tap and anything you type in the optional comment box.
• •Where it goes: Cloudflare Workers and Cloudflare KV storage, which host and store the answers for us.
• •Your IP address is not stored. It is hashed and truncated so duplicate or abusive submissions can be spotted, and the original address is never kept.

No analytics

The Tidyfollow extension contains no analytics, tracking or advertising code, and does not record how you use it.

Our processors

We use exactly two outside services, only for the purposes above:

• •Cloudflare, Inc. — hosts our licence server and stores uninstall survey answers.
• •Freemius, Inc. — sells Pro as merchant of record, processes payments, and confirms whether a licence key is valid.
• •Nothing is sent to any other company. Instagram (Meta) receives only what you would send by using instagram.com yourself.

Permissions

Tidyfollow asks Chrome for as little as it needs:

• •instagram.com access: to read your lists and run the actions you choose, on instagram.com only.
• •cookies: to read the ds_user_id cookie on instagram.com, locally, so it knows which account is signed in.
• •storage and unlimited storage: to keep your scans, history and settings on your device. Large accounts need more than Chrome’s default allowance.
• •scripting: to send each request from inside an instagram.com tab, because Instagram only accepts follow and unfollow requests that come from its own pages.
• •alarms: to re-check an activated Pro licence every few hours.

Video on this website

The Tidyfollow page on tailsgate.com has a demo video hosted on YouTube. Nothing is requested from YouTube or Google until you press play; after that, YouTube’s own privacy policy applies.

Changes

If what Tidyfollow sends ever changes, we will update this page and its date before the change ships, and tell you in the extension.

Contact

Questions about privacy or your data: email [email protected]. To have a licence or survey record deleted, email us from the address you paid with or include your install identifier, and we will remove it.