StoryStash – Privacy Policy
Effective date: November 9, 2026 · Applies to the StoryStash – Story & Post Saver extension for Google Chrome.
Summary
StoryStash does not collect, store, sell or share any personal data. There are no accounts, no analytics, no tracking and no advertising. Everything the extension does happens inside your own browser, and nothing is ever sent to the developer.
What the extension does
StoryStash adds a download button to stories, photos and videos on instagram.com. When you press the button, the extension saves that photo or video to your computer, named with the account's username and the date.
Information handled on your device
The following information is handled only on your device; it is never transmitted to the developer or to any third party.
- Website content on instagram.com – while you browse instagram.com, the extension reads the media information Instagram's own page receives (photo and video addresses, usernames and dates) and keeps it in the open tab's memory, so it can find the largest file when you press a download button and name the file with the username and date. It is discarded when you close or reload the tab.
- Instagram security token – when you press a download button and the page does not already have the largest file, the extension reads Instagram's CSRF security token from the page and sends one request to instagram.com for that single post or story, the same request Instagram's own website makes. This uses your existing Instagram login; the extension never sees or stores your password. You can turn this off in the extension's settings ("Ask Instagram for the largest file").
- Your settings – the four options in the extension's popup (date style, folder name, per-user folders, "ask Instagram for the largest file") are stored locally in your browser with Chrome's local storage. They are not synced or transmitted anywhere.
- Downloaded files – saved to your own Downloads folder. The extension only checks the file name Chrome chose so it can correct it if another extension renamed it.
Network requests
To get the largest available file, the extension may request information about the post or story you clicked directly from instagram.com (only after you press a download button, one request per click), and downloads the file from Instagram's own content servers (cdninstagram.com / fbcdn.net). These requests go straight from your browser to Instagram, the same way Instagram's website loads them, using your existing Instagram session. They are never routed through, copied to, or logged by any server of the developer. The extension contacts no other servers.
What we do not do
- No collection of personal information, browsing history, passwords, cookies or messages.
- No selling or transferring of user data to third parties.
- No use of data for purposes unrelated to saving the item you chose.
- No use of data to determine creditworthiness or for lending purposes.
- No remote code: all code is included in the extension package.
StoryStash's use of information complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
Permissions
downloads– save the chosen photo or video to your Downloads folder with a clear name.storage– remember your settings on this device.- Runs on
www.instagram.compages – to show the download buttons and find the largest file of the item you clicked. - Access to
*.cdninstagram.comand*.fbcdn.net– fetch the photo or video file itself (and convert WebP photos to JPG on your device).
Children
The extension is not directed at children and collects no data from anyone.
Your responsibility
Only save content you own or have permission to keep, and respect the creators' rights and Instagram's Terms of Use. StoryStash is an independent project and is not affiliated with, endorsed or sponsored by Instagram or Meta Platforms, Inc. Instagram is a trademark of Meta Platforms, Inc.
Changes
If this policy changes, the new version will be published on this page with a new effective date.
Contact
Hadi Ehterami – hadi.ehterami@gmail.com