Privacy at Dumpor
Text dated
The summary
You never create an account on dumpor.org, and no log of searched handles exists here. The site carries no ads and sets no cookie used to track or market. Below, each party involved in a search is listed with exactly what reaches it.
Your browser
Your device keeps up to 10 recent handles in the browser’s storage area, and that list never travels to us. “Wipe the list” empties it immediately; a private window erases it as soon as it shuts. Each search also gets a fresh token from a quick, unseen check by the abuse filter; only after a run of heavy use can a solved visible check cover several searches for a short while. Offline copies of the site’s pages are kept by a service worker, but never of any Instagram account you viewed.
Cloudflare, our host
Every search loads an address of the form /?u=name, handle included. Cloudflare, which hosts and
delivers the site, treats that request as it treats any other and may retain it in standard logs. Cloudflare
also runs the Turnstile check: an invisible one on every search, and a visible one that can appear
after many searches in a row. Its own privacy policy covers that check.
Our server
The page asks our server for the account. Searches are rate-limited per connection, counted against a one-way hash of your IP address, which itself is never kept. Data about public profiles can stay in the server’s memory for anywhere from a few minutes to around an hour, which spares a second fetch when someone searches the same handle soon after. That copy never goes to disk and carries no link to whoever searched. Our usage counters only add up totals like searches and errors; they never hold a handle or an IP address.
The data provider
Next, the handle goes from our server to a hired data service, and that service looks the public account up on Instagram. All the provider receives is the handle, inside a request our server made; you never appear in it, and the provider may log that handle in its own records.
Instagram’s media hosts
Many post photos and story or reel videos reach your browser from the media hosts Instagram operates, without a detour. They get to see your IP address for that reason, no differently from any website you happen to load. They get no referrer from this page and no Instagram login. Avatars, every saved file and the round cover image on each highlight take a different path, through our server, so for those files the image hosts only ever see our server.
Sharing and changes
No data is sold, and nothing goes to anyone beyond the parties named above. If that were to change, the notice would land here before anything else, dated at the top.
Questions and requests
Ask us at any time what we hold about you, or have it corrected or erased. Expect a written reply, and expect it to say that our records hold nothing that could single you out. Email contact@dumpor.org. Complaints can also go to the privacy authority of the country you live in.