Privacy

The short version

Verniera has no accounts, so there is nothing to sign up for and no password to store. It never asks for an Instagram login. It keeps the username you type only as a one-way hash, only for one hour, and only so the hourly limit works.

Everything below is the long version of those three sentences.

What Verniera never asks for

• Your Instagram password, or any other password.
• Access to your Instagram account through a login screen or an app permission.
• Your name, your email address or your phone number, unless you choose to send a message through the contact page.
• Payment details. There is nothing to pay for.

If a site that looks like this one asks for an Instagram password, it is not this one. No tool needs your password to read a public profile, because a public profile is public.

What Verniera stores when you run a lookup

One row per reading, holding:

Field	What it is	How long it is kept
Which instrument ran	"Follower count", "Engagement rate"	Indefinitely
The resulting figure	"128,400", "4.7%"	Indefinitely
Time of the reading	A timestamp	Indefinitely
A hash of the username	A one-way hash, not the username	One hour
A hash of your IP address	A salted one-way hash, not the address	One hour

The two hashes cannot be turned back into a username or an address. They exist so the site can tell that twenty lookups came from the same connection without knowing which connection that is. After an hour a scheduled sweep clears both, and the row that remains is a tool, a number and a time.

Why the recently checked list is safe to show

The home page shows recent readings as a tool, a figure and a relative time. It shows no usernames, because usernames are not kept in a readable form. There is no way to work out from that list who was measured.

Cookies

The public side of this site sets no cookies at all. There is no analytics script, no advertising pixel, no social embed and no third-party tag.

The admin panel at /admin sets exactly one cookie, holding a signed session token, so a signed-in editor stays signed in. It is HTTP-only, restricted to this site, and it is deleted when the session ends. Visitors never receive it.

Fonts and third-party requests

The three typefaces are served from this site's own domain, not from a font CDN, so loading a page here does not tell any other company that you visited.

The one exception is a profile photograph. Instagram serves those from its own servers, so an image on a result card is fetched from Instagram directly, and Instagram can see that request the same way it would if you had visited the profile in a browser tab.

Contact messages

If you send a message through the contact page, Verniera keeps the name, email address, subject and message you typed so it can reply, along with a hashed IP address to catch automated spam. Messages are deleted twelve months after the conversation ends. Ask, and yours will be deleted sooner.

Your rights

There is no account to export, because there is no account. If you have sent a contact message and want it removed, ask through the contact page and it will be deleted.

Changes

Material changes to this page will be dated at the bottom of it. There is no mailing list to notify, because there is no mailing list.