Privacy

Last updated 14 September 2026

Sendfess turns submissions into finished Instagram posts. This page says what we store while doing that, why, and for how long. It is written to be read, not to be survived.

Who we are

Sendfess is run by Emiel Vanderghinste, a sole trader registered in Belgium under company number 1042.140.977, Korbeekstraat 36, 3061 Bertem, Belgium. For everything below, that is who decides what happens with your data, and who you write to at emiel@sendfess.com.

If you sent a confession

We store the text you wrote and the moment you sent it. That is the whole list. No name, no email, no account, and we do not store your IP address next to it. There is nothing in a submission that points back to you, unless you write it there yourself.

The page you wrote to sees your text and decides to post it or bin it. Once it is posted on Instagram it is public, and from that moment Instagram's rules apply to it as much as ours.

One honest footnote: the servers that run this site keep short-lived technical logs, the kind every website has, and those contain IP addresses. They are not linked to submissions and are not used to work out who wrote what.

Want something you sent taken down? The page owner can decline or delete it, and they are the fastest route. Write to us and we will help.

If you run a page

Then we hold rather more, because you asked us to:

• Your email address, if you signed up with email. It exists to send you a login link and to reach you about your page.
• Your Instagram user ID, your username, and an access token, if you signed in with Instagram or connected it. The token is what lets us publish the posts you accept. It lives on our server, never in your browser, and it is deleted the moment you disconnect.
• Your page settings: name, intro, prompt, colours, chosen template, and the design you uploaded if you uploaded one.
• The submissions sent to your page, with their status and timestamps.

What we ask Instagram for

Two permissions, and no more than that: one to see which professional account you are, and one to publish content to it. We do not read your messages, we do not read your followers, and we do not touch anything you posted before. The only thing we ever publish is a post you accepted, from a submission you saw.

Cookies

Two, both strictly necessary, and that is why there is no cookie banner on this site. There is no analytics script, no advertising pixel and no third party watching you here.

• sendfess_sessie keeps you logged in for 30 days.
• sendfess_ig_nonce lives for a few minutes and exists to make sure the login coming back from Instagram is the one that left from your browser.

Who else touches it

We run this on other people's machines, and they are bound to use what they see only to provide their service to us:

• Vercel, which runs the site, on servers in Frankfurt.
• Neon, which runs the database, also in Frankfurt.
• Resend, which delivers the login emails.
• Meta, when a post you accepted goes to Instagram.
• Stripe, when you subscribe. You type your card details on Stripe's own page; they never reach us. We only hear back that you paid, and until when.

The site and the database sit in the European Union on purpose. Resend and Meta are American companies, and so is Stripe; those transfers rest on the standard safeguards those companies publish. We do not sell anything to anyone, and there is nothing here to sell: the data is a pile of anonymous sentences and a handful of page settings.

How long we keep it

• Submissions: until you delete them, or until your page is deleted.
• Your account and page: for as long as you have one with us.
• Login links: 15 minutes, and they work once.
• Login sessions: 30 days, or until you log out.
• The Instagram token: until you disconnect, or 60 days if unused.

Deleting everything

Ask and it is gone. Two ways, and both do the same thing:

• Email emiel@sendfess.com. You get an answer from a person, and the deletion within 30 days.
• Or go through Instagram: in your Instagram settings, remove Sendfess and ask for your data to be deleted. Instagram tells us, we delete your account, your pages and the submissions on them, and you get a link showing what was removed.

Removing our app from Instagram without asking for deletion does something smaller and deliberate: it disconnects the posting, and leaves your inbox standing.

Your rights

Under the GDPR you can ask for a copy of what we hold, have it corrected, deleted, or restricted, and you can object to how we use it. Write to us and you will hear back. If we get it wrong, you can complain to the Belgian Data Protection Authority, Drukpersstraat 35, 1000 Brussels.

We use what is here to run the service you asked for, and for nothing else. There is no profiling and no automated decision that affects you.

Changes

If this page changes, the date at the top changes with it. If a change matters to you, you get an email about it rather than a new date to notice yourself.

Questions about any of this? emiel@sendfess.com