Privacy without vague promises

When you choose Find media, PostTote processes the submitted public-post URL to identify its media and create short-lived save links. It does not ask for a Threads password, account cookie, or access token.

Operational logs must not contain pasted post URLs, captions, usernames, shortcodes, signed media URLs, or file names. Opening a preview or downloading a file may connect your browser or the bounded server fallback to the source media host, which receives ordinary network information under its own policies.

PostTote counts page views, estimated daily visitors, and crawlers on its own server. It records the page and language, referring host, country code, and broad browser, device, and operating-system categories. It does not keep raw IP addresses, raw User-Agent strings, full referring URLs, or a visitor cookie.

For human daily visitor estimates, the server combines network and browser signals with a random salt that changes each Beijing-calendar day, then keeps only a short irreversible value. Raw events are removed after 14 days and product-level daily summaries after 90 days. Aggregated website statistics may be kept longer for long-term usage trends.

On production pages where it is configured, GA4 loads only after you choose Allow in the footer. This explicit opt-in applies in every region. GA4 remains blocked after refusal or when Do Not Track or Global Privacy Control is enabled, and refusing it does not limit the downloader.

GA4 receives a clean page path and title without query or fragment plus ordinary browser and network information, which can include an IP address. PostTote never sends the pasted post link, caption, username, shortcode, signed media URL, or file name to GA4. The GA4 property retains event data for two months; Google signals and enhanced measurement are off. GA reporting remains separate from first-party statistics, so the two counts are not added together.

You can decline or revoke GA4 in the footer and can clear site data in your browser. DNT/GPC overrides an earlier allowance. Media files stay on your device according to your browser settings.

If a contact address is available on the Contact page, use it for privacy requests and include only what is necessary. Never send passwords, account cookies, or access tokens.