Skip to content
FDownloaders

Privacy Policy

Last updated: November 11, 2026

This policy explains how FDownloaders ("we", "us") handles information when you use fdownloaders.online (the "Service"). We collect as little as possible and keep it for as short a time as possible.

Summary

  • We do not store your videos. Files stream from Facebook to your device.
  • We do not log the links you submit.
  • No account or login is needed. If you choose to connect Facebook, that connection is kept in an encrypted cookie on your device and expires within two hours.
  • We do not sell personal information.

Information we process

When you use the downloader

  • The link you paste. Our server uses it to request the video's publicly available information from Facebook and to list download options. Results may be held in memory for up to 10 minutes so repeat requests are fast, then discarded. Links are not written to logs or a database.
  • Your IP address. Held briefly in memory to apply rate limits and prevent abuse; cleared within minutes. Our hosting provider and Cloudflare may also process IP addresses in their security logs.
  • Technical logs. We record events such as "download started" or "request rejected" with a status code and size, without links, video IDs, names or tokens. We keep these for up to 30 days.

When you connect Facebook (optional)

Connecting is only needed for your own non-public videos. Facebook Login gives us a temporary access token with the permissions you approve (by default: public_profile, user_videos, pages_show_list, pages_read_engagement). We use it to:

  • show your name in the downloader so you know which account is connected;
  • confirm that a video was uploaded by you or by a Page you manage;
  • list your and your Pages' videos when you open "Choose from my videos";
  • obtain the video file from Facebook for you to download.

The token, your Facebook user ID and name are stored only inside an encrypted, HTTP-only cookie on your device. We do not keep them on our servers. Video titles, thumbnails and files pass through our server while you're using it and are not retained. We never post, message or change anything on your Facebook account, and we use the data only to provide the Service — never for advertising or profiling.

Cookies

  • fdl_session — encrypted Facebook connection; deleted when you disconnect, or after two hours at most.
  • fdl_oauth — security token used during sign-in to prevent forgery; expires after 10 minutes.

Analytics and advertising

We may use Google Analytics 4 to understand which pages are useful. If enabled, IP anonymisation is used and data is reported in aggregate. We may show ads through Google AdSense in the future; if we do, this section will be updated. Third-party vendors, including Google, use cookies to serve ads based on prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visits. You can opt out of personalised advertising in Google Ads Settings and learn more at How Google uses information from sites that use its services. Visitors in the EEA, UK and Switzerland are asked for consent before these cookies are used.

Service providers

  • Meta Platforms (Facebook) — video information and files are requested from Facebook's servers; Facebook Login and the Graph API are used only if you connect.
  • Cloudflare — DNS, TLS and security filtering.
  • Our hosting provider — runs the application servers.

Legal bases (EEA/UK users)

We process data to provide the Service you request (contract), to keep it secure (legitimate interests) and, for analytics and advertising cookies where required, with your consent.

Your choices and rights

  • Disconnect at any time with Disconnect in the downloader, or remove our access entirely with Disconnect & remove access, or in Facebook's Settings → Apps and websites.
  • Depending on where you live, you may have rights to access, correct, delete or object to processing of your personal data. Because we keep almost nothing, most requests are resolved by disconnecting. See data deletion or email contact@fdownloaders.online.
  • You can also complain to your local data protection authority.

Children

The Service is not directed at children under 13 (or the minimum age for Facebook in your country), and we do not knowingly process their information.

Security

All traffic uses HTTPS. Session data is encrypted with AES-256-GCM. Requests are rate-limited, and the server only connects to Facebook and Facebook's video servers.

Changes

We'll update the date at the top of this page when this policy changes. Significant changes will be highlighted on the site.

Contact

Questions about privacy: contact@fdownloaders.online.