Privacy Policy

Who we are

WhoLeft is operated from Germany (EU). This page is maintained by the WhoLeft team to explain, in plain language, what the site does and does not collect. For any privacy question or request under the GDPR, contact support@who-left.me.

How your social-export data is processed

The files you drop in (HTML, JSON, CSV or TXT exports from Instagram, Facebook, TikTok, X, Threads or YouTube) are parsed and compared entirely inside your browserusing client-side JavaScript. They are never uploaded to our servers, never stored, and are discarded from memory as soon as you close or refresh the tab.

We do not see your username, your follower list, your following list, or any profile handles contained in those files.

What we collect about your visit

If you accept analytics in the cookie banner, we use Google Analytics 4 (provider: Google Ireland Limited) to count visits and understand which pages are used. We enable IP anonymisation and run Google Consent Mode v2 with all signals defaulted to denied — meaning no analytics cookie is set and no measurement event is recorded until you click "Accept".

Typical data Google processes in this setup: a randomly generated client ID, the page URL, referrer, approximate (city-level) location derived from a truncated IP, device type, and browser language. We do not transmit your social-export data, file contents, usernames, or any personally identifiable form data to Google.

Google may transfer this data outside the EU/EEA (including to the United States) under the EU–U.S. Data Privacy Framework and Standard Contractual Clauses.

Legal basis (GDPR)

• Analytics cookie / Google Analytics: your consent under Art. 6(1)(a) GDPR and § 25(1) TTDSG. You can withdraw it at any time (see "Your choices" below) with no effect on processing that already happened.
• Strictly necessary site operation (delivering the page, remembering your cookie choice): our legitimate interest in running a working website, Art. 6(1)(f) GDPR.

Cookies and local storage

• wholeft.cookie-consent.v1 — local storage entry that remembers your cookie choice so we don't ask again. Set only after you click Accept or Decline.
• _ga, _ga_* — Google Analytics cookies, set only if you accept analytics. Used to distinguish visitors. Lifetime up to 2 years.

Retention

We don't keep your social-export data at all (it stays in your browser). Analytics data in Google Analytics is retained for 2 months by default in our configuration.

Your rights under the GDPR

You have the right to access, correct, delete, restrict or port any personal data we hold about you, and to object to processing based on legitimate interest (Art. 15–22 GDPR). You can also lodge a complaint with your local data-protection authority. To exercise any of these rights, email support@who-left.me.

Your choices

To change your cookie decision, clear the site data in your browser settings and reload the page — the banner will appear again. You can also opt out of Google Analytics entirely with Google's browser add-on.