Privacy Policy

Last updated: January 1, 2026

FDOWN ("we", "us", "our") operates the website fdown.tools (the "Service"). This Privacy Policy explains what information we collect when you use the Service, how we use it, who we share it with, how long we keep it and what rights you have over it.

We have written this policy in plain language. Where legal terminology is unavoidable, we include a short explanation immediately after. If anything is unclear, please contact us and we will be happy to clarify.

1. Overview

FDOWN is designed around a single privacy principle: we should know as little about you as possible. The Service does not require an account, does not ask for your name, your email or your Facebook credentials, and does not use cross-site tracking cookies. The vast majority of people who use FDOWN never communicate with us in any way that could identify them, and we believe that is exactly how a video-downloader tool should behave.

There are, however, a few pieces of information that we necessarily process in order to deliver the Service and to keep it online - for example, server logs that contain IP addresses, and any messages you send us through the contact form. This policy describes each of those data flows in detail.

2. Data we collect

We divide the data we process into three categories: data you provide to us directly, data collected automatically when you use the Service, and data we receive from third parties.

2.1 Data you provide directly

• Video URLs. When you paste a Facebook video URL into the input field, that URL is sent to our servers so that we can fetch the underlying video file. The URL is processed in memory only and is not written to a persistent database. Once the response is returned to your browser, the URL is discarded from active memory within seconds.
• Contact form submissions. If you send us a message through our contact page, we receive your name, your email address, the subject of your message, an optional related URL and the body of your message. This information is delivered to our support inbox and is used solely to respond to your inquiry.
• Email correspondence. If you email us directly at [email protected] or [email protected], we retain the content of your email and any attachments for as long as is necessary to resolve the matter you contacted us about.

2.2 Data collected automatically

• Server logs. Like every web server, our infrastructure logs basic information about each HTTP request: the requester's IP address, the date and time of the request, the URL requested, the user-agent string sent by the browser, the HTTP status code returned and the size of the response. These logs are kept for a maximum of 14 days and are used exclusively for security, abuse-prevention and capacity-planning purposes.
• Aggregated usage statistics. We maintain aggregate counters - for example, the total number of downloads in a given day, the total number of requests per country, and the distribution of download qualities requested. These statistics are not linked to any individual user and cannot be used to identify a person.
• Local storage. The Service may use the browser's local storage to remember user-interface preferences (for example, whether you have dismissed an informational banner). Local storage is kept on your device and is never transmitted to our servers.

2.3 Data from third parties

We do not purchase, rent or otherwise acquire personal data from third-party data brokers. The only third party from whom we receive data is Facebook - when you submit a video URL, we receive the underlying video file and basic metadata about that file (duration, available resolutions, file size) directly from Facebook's content delivery network. We do not receive any information about your Facebook account, your Facebook activity or your identity on Facebook.

3. How we use your data

We process data only for the following specific, limited purposes:

• To deliver the Service. The video URL you submit is processed in order to fetch the corresponding file from Facebook and return a download link to your browser.
• To respond to your inquiries. Information you provide through the contact form or by email is used to understand your question and to send you a response.
• To maintain security and prevent abuse. Server logs are used to detect and block automated scraping, denial-of-service attacks, repeated violations of our Terms of Service and other abusive behaviour.
• To monitor and improve the Service. Aggregated, anonymised statistics help us understand how the Service is being used, which features are most popular and where we should focus future development effort.
• To comply with legal obligations. If we receive a valid court order, subpoena or other legally binding request from a competent authority, we may be required to disclose information in accordance with applicable law. We have never received such a request to date, and we commit to publishing a transparency report if we ever do.

We do not use your data to build a profile of your interests, to serve targeted advertising, to train machine-learning models on your behaviour or to sell to third parties. FDOWN does not run any third-party advertising network, analytics platform or social-media pixel.

4. Legal basis for processing (GDPR)

If you are located in the European Economic Area, the United Kingdom or Switzerland, the General Data Protection Regulation (GDPR) applies to our processing of your personal data. Our legal bases for processing are:

• Article 6(1)(b) - performance of a contract. We process the video URL you submit in order to deliver the Service that you have requested.
• Article 6(1)(f) - legitimate interests. We process server logs and aggregate statistics for the legitimate interests of security, fraud prevention and capacity planning. These interests are balanced against your reasonable expectation of privacy when using a free online tool.
• Article 6(1)(c) - legal obligation. We may disclose information in response to a valid legal request from a competent authority, as described in section 3 above.
• Article 6(1)(a) - consent. When you submit the contact form, you provide the information voluntarily. We treat your submission as consent to process that information for the purpose of responding to your inquiry.

5. Cookies & local storage

FDOWN does not set any tracking cookies. We do not use Google Analytics, Facebook Pixel, advertising cookies, social-media cookies or any other cross-site tracking technology.

The Service may use the browser's localStorage API to remember preferences that are purely functional - for example, whether you have dismissed a banner. This data never leaves your device, cannot be read by any other website and is cleared when you clear your browser's site data. You can disable local storage in your browser settings without affecting the core functionality of the Service.

6. Sharing & disclosure

We do not sell, rent or trade your personal data. We do not share your personal data with third parties for their own marketing purposes. We share data only in the following specific circumstances:

• Service providers. We use a small number of third-party service providers - for example, a hosting provider that operates the servers on which FDOWN runs, and an email provider that handles our support inbox. These providers have access to personal data only to the extent necessary to perform their functions, and they are bound by contractual obligations of confidentiality.
• Legal compliance. We may disclose personal data in response to a valid legal request from a competent authority, as described in section 3 above.
• Business transfers. If FDOWN is acquired by or merged with another entity, personal data may be transferred as part of that transaction. We would notify you via a prominent notice on the Service before any such transfer takes effect.

7. Data retention

We retain personal data only for as long as is necessary to fulfil the purpose for which it was collected:

• Video URLs. Processed in memory only; not written to a persistent database; discarded within seconds of the response being returned.
• Server logs. Retained for a maximum of 14 days, then automatically deleted.
• Contact form submissions and email correspondence. Retained for up to 24 months after the last substantive communication, after which they are deleted.
• Aggregated statistics. Retained indefinitely, but in a form that does not allow identification of any individual user.

If you ask us to delete your data earlier - for example, by requesting that we erase a specific email you sent us - we will do so within 30 days of receiving your request.

8. Security

The security of your personal data is important to us. All connections between your browser and the FDOWN servers are encrypted using HTTPS (TLS 1.2 or higher). Our servers are hosted in a professional data centre that maintains industry-standard physical security, network security and access controls.

Access to personal data within FDOWN is restricted to a small number of authorised personnel, and only on a need-to-know basis. We do not store credit-card numbers, government identification numbers or other highly sensitive categories of data, so the risk surface for a potential breach is intentionally limited.

No method of transmission over the internet or method of electronic storage is 100% secure, however. We cannot guarantee absolute security, but we work continuously to keep the Service as secure as reasonably possible.

9. Your rights

Depending on your jurisdiction, you may have the following rights over your personal data:

• Right of access. You may request a copy of the personal data we hold about you.
• Right to rectification. You may request that we correct any inaccurate or incomplete personal data.
• Right to erasure ("right to be forgotten"). You may request that we delete your personal data.
• Right to restrict processing. You may request that we limit the processing of your personal data in certain circumstances.
• Right to data portability. You may request that we provide your personal data in a structured, machine-readable format.
• Right to object. You may object to the processing of your personal data based on legitimate interests.
• Right to withdraw consent. Where we rely on consent as the legal basis for processing, you may withdraw that consent at any time.

To exercise any of these rights, please contact us. We will respond to your request within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with your local data-protection authority. In the European Union, the relevant authorities are listed at ec.europa.eu/justice/data-protection/bodies/authorities.

If you are a resident of California, the California Consumer Privacy Act (CCPA) grants you additional rights, including the right to know what personal information we collect about you, the right to delete that information and the right to opt out of the sale of personal information. FDOWN does not sell personal information and has never sold personal information.

10. Children's privacy

FDOWN is not directed at children under the age of 13 (or the equivalent minimum age in the relevant jurisdiction). We do not knowingly collect personal data from children. If you are a parent or guardian and you believe your child has provided us with personal data, please contact us and we will take steps to delete that information promptly.

11. International data transfers

FDOWN's servers are hosted in the European Union, but the Service is accessible worldwide. When you use the Service from outside the European Union, your data may be transferred to and processed in a jurisdiction other than your own. By using the Service, you consent to such transfers, provided that the receiving jurisdiction offers an adequate level of data protection as determined by the European Commission, or that appropriate safeguards (such as Standard Contractual Clauses) are in place.

12. Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. We will post the updated policy on this page and revise the "Last updated" date at the top. If we make material changes - meaning changes that significantly affect how we process your personal data - we will notify you by posting a prominent notice on the FDOWN homepage for at least 30 days before the changes take effect.

We encourage you to review this policy periodically to stay informed about how we handle your data.

13. Contact

If you have any questions, requests or concerns about this Privacy Policy or about how we handle your personal data, please contact us or email us at [email protected]. We will respond to all inquiries within one business day.

If you are unsatisfied with our response, you have the right to lodge a complaint with the data-protection authority in your jurisdiction. We are happy to provide you with the relevant contact details if you let us know where you are located.