Clear about what stays local.

Information processed on your device

To provide its user-facing features, FrameShelf may process the following information locally in the browser:

• The current Instagram page, route, post identifiers, media URLs, and requested Instagram or CDN resources.
• A temporary session list of Instagram posts and media encountered while browsing, used for Session Cart, Sounds, and Analytics.
• Instagram usernames, profile identifiers, captions, hashtags, images, videos, audio, thumbnails, Stories, comments, and engagement counts.
• Comment usernames, text, timestamps, and engagement information when you request a comment export.
• Instagram authentication and session information, including anti-forgery and device cookie values, when required to make authenticated requests directly to Instagram.
• Message text entered into FrameShelf's Ghost Chat field and read-receipt or typing-request information required to provide Ghost Chat.

FrameShelf does not use Chrome's browsing-history permission or monitor browsing outside supported Instagram pages. Because it processes and temporarily caches Instagram pages and resources encountered during a browser session, this activity is disclosed as Web history and Website content in the Chrome Web Store.

FrameShelf never receives your Instagram password. Instagram cookies and authentication tokens are used only within the browser for requests sent directly to Instagram and are not transmitted to FrameShelf servers.

When Ghost Chat is used, outgoing message text is processed transiently and passed to Instagram when you choose to send it. Message content is not transmitted to or stored by FrameShelf servers.

Information stored locally

FrameShelf may store the following information using Chrome storage, page memory, or browser session storage:

• A randomly generated installation identifier.
• A signed, limited-duration Pro-access token.
• Preferences, feature toggles, folder settings, and metadata settings.
• Free-tier counters, feature-use timers, download counts, and review-prompt state.
• A bounded, privacy-filtered diagnostic retry queue.
• Temporary media, caption, username, thumbnail, audio, engagement, Session Cart, and Analytics information.
• Temporary comment-export progress.

Chrome may synchronize the random installation identifier through your Chrome Sync account when synchronization is enabled. Google's handling of synchronized data is governed by Google's privacy terms.

Downloaded media and exported files remain on your computer until you delete them.

Information transmitted to FrameShelf

Licensing and payments

FrameShelf sends a randomly generated installation identifier and the selected plan to its payment service to check, purchase, and activate Pro access.

For paying users, FrameShelf may store:

• The random installation identifier.
• Billing email supplied through Stripe.
• Selected plan and entitlement status.
• Subscription or pass expiration, where applicable.
• Stripe customer and Checkout Session identifiers.
• Payment or subscription completion status.

Payment-card numbers and full payment credentials are entered directly into Stripe Checkout. FrameShelf does not receive or store complete card numbers, security codes, or bank-account credentials.

Restore Pro

If you choose Restore Pro, you submit the billing email used with Stripe. FrameShelf uses it solely to look up an eligible existing entitlement. For an eligible request, Resend receives the recipient email address and delivery metadata solely to deliver a single-use verification link that expires after 15 minutes. The restore is bound to the same browser session that requested it. Restore Pro does not transmit or use Instagram content, URLs, usernames, messages, cookies, or authentication tokens.

Automatic operational diagnostics

FrameShelf automatically sends limited operational diagnostics necessary to maintain, secure, debug, and measure the reliability of its disclosed features.

These diagnostics may contain:

• Pseudonymous installation, session, event, and correlation identifiers.
• Extension version and Free or Pro plan tier.
• Coarse browser and operating-system type.
• Coarse page surface, such as feed, post, Reel, profile, Story, or Direct.
• Feature and media-type categories.
• Operation stage and outcome.
• Stable error code and bounded sanitized error message.
• Latency, retry count, and sanitized timestamped breadcrumbs.

Failed operations and expected limit events may be reported automatically. A limited sample of successful operations may be reported to calculate reliability rates.

Diagnostic payloads are filtered and validated to exclude:

• Instagram URLs and post identifiers.
• Usernames and profile names.
• Captions, comments, search queries, or message content.
• Images, videos, audio, thumbnails, and media or CDN URLs.
• Instagram cookies, credentials, authentication tokens, and authorization headers.
• Payment credentials and Stripe objects.
• Raw IP addresses and complete user-agent strings.

Payment-service failures may also produce bounded operational diagnostics. These reports contain only a coarse failure stage and sanitized error information, not payment credentials or customer payment data.

Uninstall visits and voluntary feedback

If you open the FrameShelf uninstall page, FrameShelf automatically records:

• A pseudonymous installation identifier.
• Timestamp.
• Coarse browser and operating-system type.
• Country code supplied by Cloudflare.

If you voluntarily submit the uninstall-feedback form, FrameShelf additionally stores the selected uninstall reason, written feedback, and an optional email address. Written feedback may contain information you voluntarily choose to provide. Authorized FrameShelf personnel may read submitted feedback to investigate the reported problem or respond to you.

Network information

Every internet request necessarily exposes an IP address and standard request headers to the network provider handling it. Cloudflare may process this information to deliver and protect FrameShelf services and derive a coarse country code.

FrameShelf does not intentionally add raw IP addresses to its diagnostic or uninstall application database. Cloudflare and other infrastructure providers may process network logs under their own privacy terms.

How information is used

FrameShelf uses information only to:

• Provide downloads, exports, Session Cart, Sounds, Analytics, Ghost Stories, Ghost Chat, and other disclosed features.
• Organize requested downloads and locally generated metadata.
• Enforce Free-tier feature limits.
• Activate and manage paid access.
• Process purchases and subscriptions.
• Respond to voluntary support and uninstall feedback.
• Diagnose failures and measure feature reliability.
• Prevent fraud, abuse, and security incidents.
• Comply with applicable legal obligations.

FrameShelf does not use collected data for personalized advertising, behavioral advertising, unrelated profiling, creditworthiness decisions, or generalized market research.

Service providers and data sharing

Information may be processed by the following services when necessary:

• Instagram and Meta, including their media-delivery networks, when FrameShelf retrieves content or submits actions you request.
• Google Chrome and Google, for extension storage, optional Chrome Sync, downloads, and Chrome Web Store services.
• Stripe, for checkout, billing, subscriptions, and payment processing.
• Resend, solely to deliver user-requested Restore Pro verification emails and process recipient-address and email-delivery metadata.
• Cloudflare, for API delivery, security, payment-entitlement storage, and coarse country derivation.
• AudioFetcher infrastructure, for licensing, retention-limited diagnostics, and uninstall feedback.

FrameShelf does not sell or rent user data or share it with advertising platforms, data brokers, or information resellers.

Other disclosure may occur only when required by law, necessary to investigate security or abuse, or as part of a permitted business transfer with any consent required by applicable law and Chrome Web Store policy.

Data retention

• Page-memory caches generally end when the Instagram page is refreshed or closed.
• Browser-session Analytics snapshots and temporary session information remain until the relevant browser session ends or the information is cleared.
• Comment-export recovery information remains only for the browser-page session and is removed after successful completion.
• Local preferences and feature state remain until cleared through Chrome or the extension is uninstalled.
• The diagnostic retry queue is limited to 100 sanitized records and seven days.
• Server-side diagnostic records are deleted after 30 days.
• Uninstall visits and voluntarily submitted feedback are deleted after 365 days.
• Checkout deduplication records may remain for up to 400 days.
• Restore Pro verification credentials and their same-browser binding expire after 15 minutes, and each verification link can be used only once.
• Pro entitlement and billing-reference records are retained while needed to provide paid access and afterward when necessary for payment disputes, fraud prevention, accounting, tax, or legal obligations.
• Stripe and Resend apply their own retention obligations to information they process.

Security

FrameShelf uses technical safeguards intended to protect information, including HTTPS encryption in transit, strict diagnostic-field allowlists, payload validation and redaction, authenticated server-to-server delivery, access controls, bounded retention, and short-lived single-use Restore Pro links bound to the requesting browser session.

No internet transmission or storage system can be guaranteed completely secure.

User choices and privacy rights

You may:

• Disable optional FrameShelf features.
• Clear extension data through Chrome.
• Uninstall FrameShelf.
• Decline to submit uninstall feedback or an email address.
• Manage an active subscription through Stripe's billing portal.
• Request access to, correction of, or deletion of server-held information by contacting help@audiofetcher.com.

A request should include the billing or feedback email or installation identifier needed to locate the relevant record. Certain billing or transaction records may be retained where legally required.

Uninstalling FrameShelf does not delete media or exports previously saved to your computer.

Automatic operational diagnostics described above are sent while FrameShelf is enabled and used. They are privacy-filtered and are not connected to an Instagram username or profile.

Chrome Web Store Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

FrameShelf uses user data only to provide or improve its disclosed single purpose. It transfers data only when necessary to provide that purpose, protect security, comply with law, or complete a permitted business transfer. FrameShelf never uses user data for personalized advertising.

FrameShelf does not permit humans to read Instagram content, authentication information, or personal communications handled locally by the extension. Authorized personnel may review voluntarily submitted feedback, privacy-filtered operational records necessary to investigate failures or security, legally required information, or aggregated and anonymized information used for internal operations.

Children's privacy

FrameShelf is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

If FrameShelf's data practices change, this policy will be updated before the new practice begins, and users will receive prominent notice where required.

Contact