Privacy Policy
What we collect, what we keep, and who else sees it. Effective October 31, 2026.
1. Scope
This policy covers finduid.net (the "Site") — the free tools, the blog, the API panel and the Boost
service. It replaces the older policy that used to live at /privacy.html;
where the two differ, this page is correct.
2. What you submit to the tools
When you use an ID lookup or a downloader, you send us one thing: the public URL or username you typed into the form. We send a request to the relevant platform, read the public result, and show it to you.
We cache that result. To make repeated lookups instant and to avoid hammering the platforms, we store the submitted URL or username together with the public identifier we resolved for it, plus the date the row was created and last updated. For example: the Facebook profile URL you pasted, and the numeric Facebook ID it maps to.
What that cache does not contain:
- your IP address;
- your browser or device fingerprint;
- any identifier that links the lookup back to you;
- your own account credentials — we never ask for a social media login, password, cookie or token, and we never have access to your accounts.
In other words, a cached row records that someone resolved a given public URL. It does not record that you did. These rows are retained indefinitely as a lookup cache; you can ask us to delete a specific one — see section 8.
We do not keep copies of the videos, photos or stories you download. Those files are served to you directly by the platform's own servers; we only resolve the link.
3. Server logs
Like any website, our hosting infrastructure writes standard access and error logs, which can include IP addresses, timestamps, requested URLs, user agent strings and referrers. These exist for security, abuse prevention, rate limiting and debugging. We do not use them to build profiles of visitors and we do not sell or share them, except where we are legally required to.
4. Accounts, API and Boost orders
If you register, subscribe to an API plan or place a Boost order, we additionally store:
- your email address, and a securely hashed password (or your Google account identifier if you sign in with Google);
- your API keys and request/usage counts;
- your orders — the target link or username, service, quantity, price, status and order code;
- payment records. We never see or store your full card number. Payments are handled by third-party processors (including PayPal and cryptocurrency gateways) who receive only what they need to take the payment.
To fulfil a Boost order we must pass the target link or username, the service and the quantity to the third-party provider who delivers it. We do not pass them your email address or payment details.
We keep account, order and payment records as long as the account exists and afterwards for as long as we need them for accounting, tax, fraud-prevention or legal reasons.
5. Cookies and session storage
The Site sets a small number of cookies:
- Session and CSRF cookies — strictly necessary. They keep you signed in where relevant and protect forms against cross-site request forgery. Session data itself is stored on our server, not in the cookie.
- Language preference — remembers whether you chose English or Vietnamese.
- Analytics cookies set by Google Analytics, described below.
- Google reCAPTCHA cookies, described below.
We also use your browser's local storage to remember that you dismissed a promotional banner, so it does not reappear every time. That value never leaves your browser.
You can block or delete cookies in your browser settings. Blocking the strictly necessary ones will break sign-in and the forms.
6. Third-party services we load
Google Analytics 4
We use Google Analytics (measurement ID
G-55EM9G7EFL)
to understand which pages are used and where traffic comes from. It loads
gtag.js
from Google's servers and sets its own cookies. Google receives your IP address, the pages you
visit on the Site, your approximate location, and basic device and browser information, and
processes it as a data processor on our behalf under
Google's Privacy Policy.
We look at this data in aggregate only. You can opt out with the
Google Analytics Opt-out Browser Add-on
or by blocking the script.
Google reCAPTCHA
The ID lookup forms are protected by Google reCAPTCHA, which is how we keep automated abuse off a free service. Google collects hardware and software information from your browser and analyses it to decide whether you are human. This is subject to Google's Privacy Policy and Terms of Service. The forms do not work without it.
Advertising and payments
Some pages may display ads served by Google AdSense, which may use cookies to personalise them; you can manage this at Google Ads Settings. Payment pages hand you off to the payment provider you chose, whose own privacy policy then applies.
Fonts and assets
Our webfonts are served from our own servers, so they expose nothing to a third party. The footer embeds a protection badge image from DMCA.com; loading it exposes your IP address to DMCA.com, as any embedded third-party image would.
7. What we never do
- We do not sell your personal data.
- We do not ask for, receive or store your social media passwords, cookies or access tokens.
- We do not email you marketing you did not ask for.
- We do not attempt to de-anonymise visitors or link lookups to individuals.
8. Your choices and requests
Email [email protected] to:
- ask what is stored for your account, and get a copy of it;
- correct or delete your account and its order history (we may keep what accounting or tax law requires);
- ask us to remove a specific cached lookup row — include the exact URL or username;
- object to or ask us to restrict a particular use of your data.
Depending on where you live you may have further rights (for example under the GDPR or the CCPA). We will honour a valid request under the law that applies to you. We may need to verify that a request about an account really comes from its owner.
9. Children
The Site is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal information, email us and we will delete it.
10. Security and international transfers
All traffic to the Site is served over HTTPS and passwords are stored only as salted hashes. No system is perfectly secure, and we cannot guarantee absolute security. The third parties above (Google, payment processors, Boost providers) may process data outside your country.
11. Copyright, DMCA and content removal
FindUid.net does not host social media videos, images or stories. Our downloaders resolve a public link that the platform itself serves. If you believe something served from finduid.net — for example an image or text in a blog post — infringes your copyright, send a written notice to [email protected] with the subject line "DMCA notice" and include:
- your name, address, telephone number and email address;
- identification of the copyrighted work you say has been infringed;
- the exact finduid.net URL of the material, specific enough for us to locate it;
- a statement that you have a good-faith belief the use is not authorised by the copyright owner, its agent or the law;
- a statement that the information in your notice is accurate and that, under penalty of perjury, you are the copyright owner or authorised to act on their behalf;
- your physical or electronic signature.
We review valid notices and remove or disable access to infringing material. Repeat infringers lose access to the Site. If you believe your material was removed in error, you can send a counter-notice to the same address with the same identifying detail, a statement under penalty of perjury that it was removed by mistake or misidentification, and your consent to jurisdiction.
To have a video, photo or profile itself taken down, you must contact the platform that hosts it (Facebook, Instagram, TikTok, X or YouTube) — removing it there removes it from our tools too, because there is nothing left for them to resolve.
12. Changes and contact
We may update this policy. The effective date at the top changes when we do, and material changes will be reflected on this page rather than announced by email.
Questions: [email protected] — or use the Contact page. See also our Terms of Service.