Privacy notice

Feednest is operated by Jakub Lipár at feednest.jakublipar.cz. For privacy requests, write to feednest@jakublipar.cz.

When you create an account, Feednest stores:

• Your name and email address.
• A hash of your password. The password itself is not stored.
• Whether and when the email address was confirmed.
• A sign-in session, kept for 7 days or until you sign out.
• A confirmation token, stored only as a hash, until you confirm the address or it expires after 24 hours.

When you connect an Instagram account, Feednest also stores:

• The Instagram user id, username, display name, and account type.
• The profile picture address Instagram provides.
• An access token, encrypted at rest, and the time that token expires.
• Whether the connection is still usable.

A feed stores its name, a public id, whether it is a page or JSON feed, and how many posts it should include. Posts themselves are not saved. Feednest requests them from Instagram when someone opens the page or fetches the JSON.

The account, session, and feeds exist so Feednest can provide the service you signed up for. That processing is necessary for the contract with you.

Connecting Instagram is a separate step. Instagram shows its own permission screen, and Feednest only reads the professional profile and media needed to build the feeds you generate. The legal basis is the contract, together with the permission you give on that screen.

Hashed confirmation tokens and signed-in sessions are used to keep accounts secure. That is a legitimate interest, limited to running the service safely. Feednest does not use the data for advertising, and it does not sell it.

The database and confirmation email are handled by WebSupport (websupport.sk), in the European Union. Confirmation emails go to the address you entered.

Instagram connections and post requests are sent to Meta’s Instagram API. Meta decides how that service processes data, including possible transfers outside the European Economic Area. Their privacy notice applies to that part of the exchange.

A public feed link can be opened by anyone who has it. A page shows the feed name, the Instagram username, and the posts. A JSON feed also includes the display name, profile picture address, captions, permalinks, and image addresses. The link is long and not meant to be guessed. Do not publish a feed you do not want others to see.

Feednest uses two cookies, both required for the product to work:

• feednest_session keeps you signed in for up to 7 days. It is HTTP-only.
• feednest_ig_state is set for about 10 minutes while you connect Instagram, so the return from Instagram can be checked.

There are no analytics or advertising cookies.

Account and Instagram data stay until you delete the related feed or connection, or until the Feednest account is deleted. Sessions expire after 7 days. Confirmation tokens expire after 24 hours. Instagram tokens are removed when you disconnect the account. Posts are not kept between requests.

You can ask for a copy of your data, a correction, deletion, restriction, or a portable copy, and you can object to processing based on legitimate interest. You can also complain to your local data protection authority.

You can delete a feed, or disconnect an Instagram account, from inside Feednest. Disconnecting removes that connection and the feeds made from it. To delete the Feednest account, email feednest@jakublipar.cz. Requests are answered within one month.

How the product works is described in the docs.