Scout Lens privacy

On www.instagram.com only, Scout Lens reads the responses Instagram has already sent to your browser while you browse. It makes no requests to Instagram of its own, and it changes nothing Instagram shows apart from its own card in the corner of a profile. From those responses it keeps the public facts of a profile:

• the handle, name, biography, link, category, follower, following and post counts, and whether the account is verified;
• public posts and reels: captions, counts, dates and tagged places;
• highlight titles, and the accounts Instagram suggests;
• the "About this account" facts Instagram shows: when the account joined and the country it is based in.

It never reads direct messages, it drops everything from private accounts, and it never reads your Instagram password, cookies or anything you type.

Scout Lens sends the facts above to theKlub's own server (api.theklub.world), over HTTPS, signed with the access token you gave it, and only for:

• profiles theKlub already reviews (creators and candidates theKlub has found);
• a profile you add with "Add to scout";
• every profile you open, only while you have turned Scouting mode on in its settings.

With a reviewed profile it also sends the accounts Instagram suggests beside it: each one's handle, name and whether it is verified, nothing more. Facts about any other profile stay in your browser for half an hour from when you first open it, in case you add it, and are then thrown away unsent. Scout Lens also sends the review decisions you give (a tier, a sport, your reasons, how long the decision took), and its own version number, so theKlub can tell you when it needs updating.

• In Chrome's local storage: your access token, the server it talks to, whether Scouting mode is on, and decisions you gave while offline, until they are saved.
• In Chrome's session storage, cleared when Chrome closes: the review queue in hand, what theKlub knows of the profiles you opened, the facts waiting to be sent or held for their half hour, which Instagram account number belongs to which handle, and your last ten decisions.

Removing the extension removes all of it. The token is stored on theKlub's side only as a one-way hash, and you can revoke it on the scout's settings page at any time.

• Instagram and theklub.world sites: to read what Instagram sends while you browse, and to send it to theKlub's server.
• Storage: the settings and the queue above.
• Side panel: the review panel beside Instagram.
• Alarms: to try a save again after the connection drops, without staying awake in the meantime.

theKlub's own admin pages may ask Scout Lens to open a profile in your Instagram tab. No other website can talk to it.

Scout Lens has no analytics and no advertising, loads no code from anywhere, and shares nothing with anyone outside theKlub. What it sends is used only for theKlub's research into which creators to invite to host trips, and is never sold.

theKlub keeps the public facts of the profiles it reviews, and the decisions about them, as part of its research into hosts, on the basis of its legitimate interest in finding them. You can ask what theKlub holds about your profile, or ask for it to be deleted, by writing to support@theklub.world. The rest of what theKlub does with personal data is in its privacy policy.