Privacy Policy

Last updated: April 30, 2026

Grabify takes a minimal-data approach. This page explains what we collect, what we don't, and what's stored where.

What stays on your device

• The URLs you paste into the app.
• Downloaded videos (in your Photo Library or app sandbox).
• Settings (theme, language preference).
• Playback positions for resume support.

None of the above leaves your device.

What our backend sees — and doesn't

When you tap Find or Best Quality, the app sends the public Facebook URL you supplied to our extraction backend. The backend uses that URL to fetch publicly-available video metadata + file URL via yt-dlp, and may cache the resulting metadata for up to 30 minutes (and the full-quality merged file in object storage for up to 7 days) so repeated requests are fast.

The backend stores:

• SHA-256 hash of the URL you submitted (not the URL itself in plaintext after caching).
• Video title, thumbnail URL, uploader name when present in the public metadata.
• Server access logs (IP address, timestamp, response code) retained for up to 30 days for abuse prevention.

The backend does not store:

• Your name, email, phone, or any account identifier.
• Your Facebook account information — Grabify never asks you to log in to Facebook.
• Cookies or device identifiers used for advertising.

Photos & Files

Grabify requests permission to add videos to your Photo Library. We only write — we do not read your existing photos.

Analytics & tracking

Grabify ships with no analytics SDKs, no tracking pixels, and no third-party advertising frameworks.

Data retention

• Backend extraction cache: 30 minutes.
• Backend full-quality file mirror: 7 days.
• Backend access logs: 30 days.
• Local app data: until you delete the app.

Third parties

• Cloudflare R2 — hosts the optional thumbnail/video mirror. Subject to Cloudflare's privacy policy.
• yt-dlp — open-source extractor running on our backend. Does not phone home.

Your rights

Because we don't tie any data to a personal identifier, there's no account to delete. To clear locally-saved videos: delete them in the Saved tab. To clear backend cache for a specific URL: contact us.

Children's privacy

Grabify is not directed at children under 13. We do not knowingly collect personal data from children.

Changes to this policy

Material changes will be reflected by updating the "Last updated" date at the top of this page.

Contact

Questions? Email nguyenquangminh570@gmail.com.