Legal notice and privacy

Publisher

Throwback is published by Jonathan Renard, sole trader (French micro-entreprise) trading as JRW-PROD, SIRET 804 712 792 00055, 921 chemin du Gendraou, 32170 Laguian-Mazous, France.

Publication director: Jonathan Renard. Contact: [email protected].

Hosting

The site is hosted by Fly.io, Inc., 321 N Clark St, Chicago, IL 60654, USA (fly.io), on servers located in Paris.

Your personal data

Your conversations, photos, videos and voice notes never leave your device: your browser reads your Instagram export and stores it locally. We have no access to it.

Exception: reels and posts shared in your conversations can be displayed through Instagram’s official embed, loaded from Meta’s servers. Meta then receives your IP address, may set its own cookies and sees the content displayed. These embeds therefore only load with your consent: a click on “Show”, or the “Always show” choice, which you can withdraw at any time below (“Cookies and local storage” section). On our side, nothing is sent or stored.

The data controller is JRW-PROD (see “Publisher”). If you buy Full access, our server only keeps: the email address used at checkout, the status of your license, random identifiers of the devices where it is activated (5 at most) and encrypted fingerprints of your Instagram account, used to tie the license to that account. This data is used to deliver and check your license, to send it again if you lose it, and to email you a code to activate it on a new device without typing it again (only a hash of it is kept, for 15 minutes at most). Legal basis: performance of the sales contract. It is kept as long as the license is active, the purchase being valid for life; after a refund or a deactivation, it is kept for 3 years to handle a possible dispute, then deleted. You can ask for its deletion at any time, which deactivates the license.

When something breaks, a technical error report is sent to Sentry: error type, page, browser and operating system. It is cleaned before sending and contains none of your conversations, contacts, key or IP address. These reports, kept for 90 days at most in the European Union, are only used to fix bugs.

If you use “Report a bug / Suggest an idea”, your text and technical details (page, browser, screen, language) are saved as an issue on GitHub, without your content or your key; Cloudflare Turnstile checks along the way that you are not a bot. These processing operations, like request limits and the fight against abusive license sharing, rely on our legitimate interest in running and protecting the service.

Our providers: Stripe and Link (payment, Link being the merchant of record), Resend (emailing your key and activation codes), Sentry (error reports), GitHub (feedback), Cloudflare (site delivery and bot protection) and our hosting provider Fly.io. Several of them are based in the United States: data sent to them is covered by the EU–US Data Privacy Framework where they are certified, and otherwise by the European Commission’s standard contractual clauses.

You have the right to access, correct, erase, restrict, object to and port your data: write to [email protected]. You can also lodge a complaint with your data protection authority (in France, the CNIL).

Cookies and local storage

Throwback uses no advertising and no analytics: our server only keeps an anonymous count of app opens per day, with no cookie or identifier. A single cookie remembers your language (throwback_locale). Your browser stores your imported data, your preferences and your license key locally; you can erase everything from the app or your browser settings.

Your archive is protected against copying: the text of your conversations is encrypted in the browser with a key our server delivers when Throwback opens, and media are made unusable as-is. This protection does not stop someone with access to your device and browser from reading your data.

Terms of sale

Full access is a one-time purchase at the price shown on the site, taxes included, with no subscription. The sale is made by Link (Stripe), merchant of record for the transaction, which handles payment, invoicing, taxes and refunds.

The license key is delivered right after payment. It unlocks the full history and captures for one Instagram account, on up to 5 devices.

Full access is digital content supplied as soon as you pay: by confirming payment, you ask for immediate access and acknowledge that you lose your 14-day right of withdrawal. For any refund request, contact Link support or write to [email protected].

Trademarks

Instagram is a trademark of Meta Platforms, Inc. Throwback is neither affiliated with nor endorsed by Meta.