REELHARBOR / PRIVACY & PERMISSIONS

Keep the file.
Keep your privacy.

What is sent

When you check a source, ReelHarbor sends a normalized Instagram page URL, your video/audio preference, and your permission confirmation. Extra tracking and query parameters are removed in your browser.

Cookies, passwords, browser login tokens, platform session data, playback fragments, and browsing history are not collected or forwarded. No analytics or third-party tracking scripts are included.

What stays local

The extension reads the current supported page's URL and title when you use it. Its content script observes route changes on supported sites solely to show its button. Only the current download state is retained in Chrome session storage; it is cleared when the browser session ends. It does not build a browsing history.

Downloads and temporary data

The server retrieves public media and briefly stages it on disk to check its size, SHA-256, format, tracks and structure. Signed platform media addresses stay on the server. Temporary files are removed after validation or transfer, including handled failures. Abrupt platform termination requires the host's temporary-file lifecycle or scheduled cleanup.

A short-lived, single-use download record lives for up to 15 minutes. Production rate limits use a keyed hash of your network address for a one-minute window. App code does not log request URLs, headers, cookies, or tokens. Hosting providers may keep their own access logs; the operator is responsible for access controls and retention.

Chrome permissions

activeTab detects the current page; downloads saves and tracks this app's file; storage holds current download status; offscreen fetches validated files without credentials and creates a local Blob. Host access is limited to the configured backend and declared Instagram content scripts.

Media is fetched with credentials omitted and then saved from a local Blob, avoiding Chrome's automatic cookie attachment to HTTP downloads. Browser memory is bounded by the app's configured maximum file size.

Your permission matters