NT Social Media Downloader Videos & photos, no watermark added

Privacy Policy

How NT Social Media Downloader handles data when you use the website or API.

Last updated: 08/08/2026

1. Overview

News Targeted ("we", "us") operates NT Social Media Downloader at sd.newstargeted.com and related API endpoints on api.newstargeted.com. This policy explains what we collect, why we collect it, and your choices.

We do not sell personal data. Download history is never used for advertising. For questions, contact [email protected].

2. What we do not store

  • We do not permanently store videos, photos, or audio you download.
  • We do not require an account to use the public downloader or resolve API.
  • We do not require you to log in to YouTube, Instagram, or TikTok to use the public downloader for typical public posts.
  • We do not keep download history unless you sign in with Discord and explicitly opt in on the Account page (off by default).
  • We do not store Discord access or refresh tokens on disk for ordinary user accounts; the access token stays in the session for the login lifetime only.

3. Discord accounts and optional download history

You may optionally sign in with Discord via OAuth (identify scope). Discord is the identity provider for that login. Controllers of the account data we store on this site are News Targeted.

  • Purpose: create an optional site account, show your Discord display name, and (only with consent) save download history.
  • Account data we store: Discord user ID, username, and display name in a private profile file keyed by Discord ID, plus a session cookie while you are logged in.
  • Admin elevation: Discord IDs on an operator allowlist also receive admin features (for example platform cookies or page scrape). Ordinary user login does not bypass rate limits.
  • Download history (opt-in): default is off. If you enable it and acknowledge this policy, we may store for each successful resolve: UTC timestamp, platform, title, and source URL. We do not store media files, cookies, or IP addresses in that history.
  • Legal basis: consent for download history; legitimate interests and/or performance of the service relationship for the login session and basic account profile needed to provide the Account page.
  • Retention: history entries older than 90 days are deleted automatically; you can clear history or delete all account data anytime on the Account page. Session cookies last up to the configured session lifetime (typically 24 hours).
  • Your controls: turn history off (stops new logging immediately), export history as JSON, clear history, or delete account data (removes your private profile/history tree and ends the session). You can also contact us using the paths in section 13.

4. Information we may process

  • Post URLs you submit: used to resolve media and return download options. Shared with upstream resolver providers and platform CDNs as needed to locate the file.
  • IP address and request metadata: used for rate limiting, abuse prevention, security, and server logs (not written into opt-in download history).
  • Contact form messages: name, email, subject, and message when you write to us via the contact page.
  • Discord login (optional): as described in section 3.
  • Facebook session data (optional): if you use advanced Facebook capture, cookie data may be sent with your request and is not stored after the resolve completes.
  • Instagram and TikTok page source (optional): if automatic resolution fails, you may paste HTML page source on the Advanced panel. It is processed to extract media URLs and is not kept after the request finishes.
  • YouTube browser capture (optional): if server resolution fails, the site may open youtube.com in a popup and run a capture script in that window. Player data (JSON or HTML containing stream URLs and video metadata) is sent back to this site to build download links. We process it for that request only and do not keep it afterward. No YouTube account is required for typical public videos.
  • HTML page source or player JSON (optional): if you paste page source, use a bookmarklet, or submit captured YouTube player data for advanced fallback, it is processed to extract media URLs and is not kept after the request finishes.
  • Short download ids (temporary): resolve responses may include 16-character download ids that map to signed proxy tokens for iOS Shortcuts and API clients. These mappings are stored on the server only for the same TTL as tokenized download links, then removed.
  • Admin platform cookies (optional, operators only): authorized admins may upload Netscape-format or Cookie-Editor JSON cookie files for YouTube, Instagram, or TikTok to improve server-side resolution. Those files are stored on the server in a private directory for operator use only, not for ordinary visitors.

5. Cookies and similar technologies

We use cookies and similar storage for the purposes below.

Essential cookies (first party)

  • SDSESSID: session cookie for contact form CSRF protection and optional Discord login (user and/or admin). Duration: up to 24 hours or until you close the browser.

Security and delivery (third party)

  • Cloudflare: may set cookies or use similar technologies for bot protection, caching, and DDoS mitigation.

Advertising cookies (third party)

When ads are enabled, Google AdSense may set cookies or use similar technologies. See section 6 below.

Capture and fallback (in your browser)

  • Facebook / YouTube popups: when you use automatic or bookmarklet capture, data is read from the social platform page you opened and posted back to sd.newstargeted.com via your browser. We do not receive your YouTube or Facebook password.
  • Local storage: the site may use your browser's session storage for UI state (for example Facebook capture flow). This stays on your device until you clear it.

Instagram public posts are usually resolved on our servers. Visitors do not need to paste Instagram cookies unless an operator has not configured the server session and you choose the Advanced page-source fallback.

You can control cookies through your browser settings. Blocking essential cookies may prevent some features (such as the contact form) from working. Blocking popups may prevent YouTube or Facebook browser capture from completing.

6. Google AdSense and advertising

Public pages on sd.newstargeted.com may show ads served by Google AdSense (publisher ID ca-pub-3060717665802203). Google AdSense may:

  • Use cookies and similar technologies to deliver and measure advertisements.
  • Collect information about your visits to this site and other sites.
  • Use that information to show ads that may be relevant to you.
  • Process data under the Google Privacy Policy and How Google uses advertising cookies.

Optional download history is not used to personalize ads. You can manage personalized ads at Google Ad Settings. EU/EEA users may also use Your Online Choices.

7. Logs and retention

Server logs may include timestamps, IP addresses, request paths, user agents, and error details. We use logs for troubleshooting, security, and abuse detection.

Typical retention:

  • Resolve cache: short-term only, to reduce repeated upstream requests.
  • Download tokens and short download ids: expire after the TTL shown in API responses (typically up to 24 hours). Expired records are deleted automatically.
  • Opt-in download history: up to 90 days per entry, or until you clear it or delete your account data (see section 3).
  • Discord account profile files: until you delete account data or ask us to erase them.
  • Server logs: rotated or deleted on a rolling basis unless needed for an active security or legal matter. Logs may include structured error codes (for example rate_limited or resolve_failed) without storing full post content.
  • Contact messages: kept as long as needed to respond and for reasonable business records.
  • Admin platform cookie files: kept until an authorized admin deletes them or replaces them with a new upload.

8. Third parties

  • Google (AdSense): advertising on public website pages.
  • Cloudflare: DDoS protection, CDN, and related security services.
  • Discord: OAuth identity provider for optional user login and for admin elevation of allowlisted accounts. See Discord's privacy policy for how Discord processes OAuth.
  • Social platforms and resolver providers: receive post URLs (and optional session, source, or player data you submit) to locate media. YouTube resolution may contact Google/YouTube services and googlevideo.com CDN endpoints. Instagram resolution may contact Meta/Instagram services and fbcdn.net CDN endpoints. SoundCloud resolution may contact SoundCloud and sndcdn.com CDN endpoints.
  • Open-source tooling on our servers: tools such as yt-dlp may process URLs you submit to fetch stream metadata from platform APIs. This runs on our infrastructure; your device is not required to run yt-dlp.

Each third party has its own privacy policy. We encourage you to review those policies when you use their services through our site.

9. Legal basis (EEA/UK)

Where GDPR or similar law applies, we process personal data on these bases:

  • Legitimate interests: operating the service, security, rate limiting, fraud prevention, and maintaining an optional login session/profile so you can use the Account page.
  • Contract or pre-contractual steps: responding to contact form requests you send us.
  • Consent: opt-in download history; non-essential cookies or advertising where required (you may withdraw via Account toggles, browser, or ad settings).
  • Legal obligation: when we must retain or disclose data to comply with law.

10. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or object to processing of personal data we hold about you, and to data portability where applicable. You may also lodge a complaint with your local data protection authority.

For Discord accounts on this site, use the Account page for consent and account deletion, and My downloads to view, export, or clear history. You may also contact [email protected] or use our contact page. We may need to verify your identity before responding.

11. Children

This service is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

12. Changes

We may update this policy. The "Last updated" date shows the current version. Continued use after changes means you accept the updated policy where permitted by law.

See also our Terms of Service.

13. Contact

Privacy questions: [email protected] or contact us.