Privacy Policy

Last updated: October 2026

This policy explains what StealthPeek (“we”) collects, why, and what you control. The short version: we collect the minimum needed to run the service, and we never connect your identity to the profiles you view.

1. What we collect

• Lookup data: the public Instagram username you enter in the viewer. A search opens a session, and the results are delivered into that session rather than stored against you. The request itself appears in short-lived server logs, as described under technical data.
• Technical data: standard server logs (IP address, browser type, timestamps, and the requested URL, which can include the username you looked up) used for security, rate-limiting, and diagnostics. Logs are retained for a limited period.

2. What we never collect

• Your Instagram username and password: we do not ask, and you must not provide them.
• Your own Instagram profile or its activity.
• Identity documents, payment card numbers, or precise location.

3. How we use data

• To perform lookups and deliver the viewer experience;
• To maintain and improve the service (aggregate usage statistics);
• To prevent abuse and misuse of the service;
• To respond to your support requests.

We do not sell personal data. We do not connect what you view to your identity.

4. Cookies and storage

The site uses minimal browser storage for functionality. When you start a lookup, we set one short-lived cookie (sp_ct, expires in 5 minutes) that carries the bot-check token between our pages. It contains no personal data.

We store your cookie-consent choice in a cookie (cf_consent) so we do not ask again. It records only your consent preferences, no personal data.

We use Google Analytics to measure how visitors use the site: pages visited, approximate location, and device and browser type. It sets cookies for this. We do not use cross-site advertising cookies, and we do not sell or share this data for advertising.

5. Third parties

We use Cloudflare as our hosting and CDN provider (including its Zaraz tag manager). When you start a lookup, Cloudflare Turnstile runs a bot check on our behalf and processes the data needed for that check.

We use Google Analytics (operated by Google LLC) to measure how the site is used. Google processes this data on our behalf, and may process it for its own purposes under Google’s privacy policy.

If you add StealthPeek to your Google preferred sources, the page loads Google’s Preferred Sources script (news.google.com/swg/js/v1/publisher.js) and the button takes you to google.com to confirm the choice. The script loads only after you accept cookies; if you reject them, it is not loaded and a plain link to google.com is shown instead.

We may disclose data where required by law or to protect the service from abuse.

6. Your rights

Depending on your jurisdiction (including GDPR in the EU/UK and CCPA in California), you may have rights to access, correct, export, or delete your data, and to object to processing. Email support@stealthpeek.com and we will respond within 30 days.

7. Children

The service is not directed at children under 13, and we do not knowingly collect their data.

8. Changes

We may update this policy. Material changes will be posted on this page with a new date.