Privacy policy

I’m Denandro Yusuf, based in Bali, Indonesia, and I run this site myself. I also run a Meta developer app called Portfolio, which connects to one Instagram account: mine, @jdenandro. Questions go to hello@jdenandro.com.

Visits. Vercel Web Analytics counts page views and a few events, such as a demo opened or the contact form sent (with the project type chosen). It uses no cookies, and no event carries anything you typed. Vercel’s analytics privacy notice (opens in a new tab) explains what it records.

The contact form. It sends what you write, including your name and email. It is built to email your brief to me through Resend. If the email isn’t switched on or fails, or the form was filled in too fast, the whole brief goes to the site’s server log on Vercel instead. Once a brief is emailed, the log keeps only a short record with a shortened hash of your IP address in place of the address itself. Vercel deletes these logs on its own within 30 days. Emailed briefs arrive in my mailbox, which Google Workspace hosts.

Your browser. It keeps a few small site settings, such as Direct mode and sound, which never leave it. The site sets no cookies and saves nothing you type into the form.

Hosting. Vercel hosts the site and, like any host, handles your IP address and browser details to deliver it. Fonts and Instagram images come through this site’s own server, so your browser doesn’t contact Google or Instagram for them.

The app only reads. It never posts, replies or sends messages, and no one else can log in to it.

• This website reads my profile and follower counts, my posts (caption, image, link, date, likes) and totals such as views and reach, and shows some of it on the homepage and the About page. It doesn’t read comments. It keeps what it reads only in its page cache, refreshed about every 20 minutes.
• Bridge, my planning tool, is a private app that runs only on my own computer and can’t be reached from the internet. It reads the same kind of data, grouped audience totals (by age, gender, country and city, never a list of people) and the comments on my reels.

If you comment on one of my reels, Bridge may store:

• the comment’s text, and the replies under it
• your Instagram username
• its like count and when it was posted

It reads my reels from the last 14 days at each sync, and my 20 most-viewed reels at most once a week: up to 100 comments per reel, with the replies under them. They are kept in a database file on my computer, in the tool’s automatic backups there, and in any export I make of its data. If I save a reply video drafted from your comment, the draft’s notes quote its text, without your username. None of this has an expiry date: comments stay until the tool sees they are gone from Instagram, or until I delete them, and a quote in a draft stays until I delete it.

I read them to see what people ask, so I can answer in videos. Drafting uses Anthropic’s Claude, and comment text goes to it when I ask Bridge for:

• a reply video to one comment: that comment, cut to 600 characters
• video ideas from comments: at most 150 at a time, each cut to 280 characters, with the questions and phrases that come up most
• help with a saved reply video: the comment it answers

I also read comment text with Claude Code, Anthropic’s coding assistant, on my computer when I plan videos. Either way I leave out usernames and comment IDs, and an @mention in the text is replaced before anything is sent.

I don’t sell anyone’s data, share it with advertisers or use it for ads. These services handle it for me:

• Vercel: hosting, analytics and server logs.
• Resend: the contact form’s email, once switched on. It keeps its own record of each message for 30 days.
• Google Workspace: my email, where briefs and messages to me arrive.
• Meta: the source of the Instagram data. What you post on Instagram falls under Meta’s own policy.
• Anthropic: comment text, never your username, when I draft videos with Claude. It keeps what it receives under its own policy.

The Instagram access tokens are never sent to a visitor’s browser: the site’s stays in its server settings on Vercel, my tool’s on my own computer. I share neither.

Email hello@jdenandro.com and I’ll delete what I hold about you within 30 days. The data deletion page has the details.

This site isn’t meant for children under 13, and I don’t knowingly collect their data. If a child has sent me something, email me and I’ll delete it.

If what the site or my tool does with data changes, I’ll update this page and the date at the top.