Privacy policy

Media and your Instagram session

When you start a download, the extension uses the Instagram page open in Chrome to identify the media you selected. Your browser requests the relevant posts, media URLs and files from Instagram and its delivery network. The extension saves the result on your device. The ExtMax Team does not receive a copy of your downloads.

ExtMax is independent of Instagram and Meta. Their privacy policies govern the requests your browser makes to their services.

Chrome permissions

Chrome grants the extension the permissions listed below. A custom save folder requires a separate grant for the directory you choose.

• activeTab — current tab

  When you open the extension, it can identify the active tab and check whether you are on Instagram. This permission gives temporary access to the tab you invoked it on.

• sidePanel — settings

  Clicking the extension icon opens its panel in Chrome. There you can change the download button display, folder layout and filename settings.

• storage — preferences and session state

  Chrome stores download preferences such as button visibility and naming rules. The download counter and review prompt state are local. Selected Instagram request metadata is held in session storage for the relevant tab. Chrome Sync may synchronize download preferences when enabled.

• downloads — saving with Chrome

  For a browser-managed download, the extension passes Chrome the media URL or a browser-created file URL and the requested filename. Chrome writes the file to your configured download location and manages the download entry.

• offscreen — custom folder writes

  For a custom save location, Chrome runs an extension document in the background to write the selected media. It checks that the stored directory handle still has write permission before creating files. You can be asked to authorize the directory again if access expires.

• cookies — Instagram session requests

  For a Story or profile request that needs authentication, the extension identifies the cookie store for the Instagram tab and reads its csrftoken. It uses the token with Instagram’s service to request content visible in that session. You do not enter your Instagram password in the extension.

• webRequest — Instagram request details

  While Instagram loads, the extension observes matching requests from its pages. It retains selected Instagram headers and a matching GraphQL query identifier per tab so Story and profile requests can use the parameters Instagram expects. These temporary entries are removed when the tab closes.

• Host access — instagram.com and cdninstagram.com

  The host permissions cover these domains and their subdomains. They let the extension display controls on Instagram pages, identify posts and Stories, and retrieve the selected media from Instagram and its delivery network.

Files, folders and Chrome Sync

Folder naming rules and other download preferences use Chrome’s sync storage. If Chrome Sync is enabled, Chrome may sync those preferences between your browsers. Media files are saved to the download destination you choose.

The extension keeps preferences such as the destination type, page language, a download counter and review-prompt state in local browser storage. For a custom destination, it stores a directory handle in IndexedDB and requests permission to write to that folder.

Custom directory handles stay in the extension’s own IndexedDB storage. They are not included in synced preferences. Access to saved media on disk depends on your device, its user accounts and the folder permissions you set.

Extension data use and sharing

You can use the extension without giving the ExtMax Team your name, email address, phone number, payment details or identity documents. The browser may process the Instagram username attached to a post, for example when you choose to include it in a filename.

The extension contains no advertising or usage analytics scripts. The ExtMax Team does not collect a history of other websites you visit or sell extension user data to advertisers or data brokers. The team follows the Chrome Web Store Limited Use requirements for data obtained through Chrome APIs and uses that information only to provide or improve the download features described here.

Website visits and analytics

The site uses a language preference cookie to remember your choice. Hosting and network providers may process access information, such as IP address, request time and requested path, to deliver the site and troubleshoot errors.

When Google Analytics 4 is enabled on this website, it starts on arrival. Google’s tags use first-party cookies to distinguish browsers and visits. We measure which public pages are viewed. The site has no analytics consent or withdrawal control. The extension does not send Instagram activity, download history or saved files to Google Analytics.

Support email

When you write to the ExtMax Team, your email provider and our mailbox provider process your address, message, replies and any attachments you choose to send. We use them to investigate your request and follow up. Share only the information needed to reproduce the issue.

Retention and your choices

You can change download settings, choose a different folder, revoke its permission in Chrome, or remove the extension. Files already saved remain on disk until you delete them. You can manage synced settings through Chrome and clear website cookies in your browser.

Support correspondence is kept as needed to investigate the issue and handle related follow-up. For a privacy question or a request concerning your support email, contact the ExtMax Team and identify the relevant conversation.

Policy updates

The date on this page identifies the latest revision. We will update these disclosures when the website or extension changes how it handles information.