Can an unfollower app see my DMs or photos?

Glimpsr cannot. It only decompresses the relationship JSON files in your export; messages and media are never read, and in device-only mode nothing is uploaded at all.

Does Glimpsr upload my data?

Not in device-only mode (the default) — your export is parsed in your browser and 0 bytes leave your device. Only if you turn on sync does a normalized payload (usernames, profile links, follow timestamps, list membership, capped at 5 MB) get sent.

What we can — and can't — see

Glimpsr reads the official ZIP you download from Instagram, entirely inside your browser using a Web Worker. We only ever decompress the relationship JSON files; media is never touched. In device-only mode (the default), nothing is uploaded. When you enable sync, we receive a normalized payload no larger than usernames, profile links, follow timestamps, and list membership — capped at 5 MB and validated on arrival.

We can see

Usernames in your followers / following lists
The follow timestamps Instagram includes in the export
List membership (followers, following, pending, close friends, blocked)

We never see

Your Instagram password — we never ask for it
Your DMs, photos, videos, or any media
Anything at all, unless you turn on sync

What's inside your Instagram data export

The “Followers and following” download is a ZIP of small JSON files. Glimpsr reads only the relationship lists:

followers_1.json— the accounts that follow you
following.json— the accounts you follow
pending_follow_requests.json— follow requests you've sent that aren't accepted yet
close_friends.json— your close friends list
blocked_accounts.json— accounts you've blocked

Not sure how to get it? Download your Instagram data (JSON).

FAQ

Can an unfollower app see my DMs or photos?: Glimpsr cannot. It only decompresses the relationship JSON files in your export; messages and media are never read, and in device-only mode nothing is uploaded at all.
Does Glimpsr upload my data?: Not in device-only mode (the default) — your export is parsed in your browser and 0 bytes leave your device. Only if you turn on sync does a normalized payload (usernames, profile links, follow timestamps, list membership, capped at 5 MB) get sent.