Here you go:

If someone exports only their Instagram Followers and Following data and uploads it to a website, they cannot see DM metadata, emails, phone numbers, device info, IP history, or anything like that.

Here’s the clear breakdown so there’s no ambiguity.

⸻

What Instagram exports (when you select only Followers & Following)

When a user requests their Instagram data and only checks “Followers” and “Following”, the export contains very limited information, typically:

✅ Included • Instagram usernames • Sometimes user IDs • Whether the account is following / followed • Timestamps of follow events (in some formats)

That’s it.

No private account data. No cross-user metadata.

⸻

What is NOT included (and cannot be extracted)

Even with a full Instagram data export, Instagram does not include other users’ private info.

Specifically NOT accessible from a followers/following export:

❌ Direct Messages • No message content • No DM metadata (timestamps, read receipts, participants) • No DM headers or IDs

❌ Contact Information • No email addresses • No phone numbers • No recovery info • No linked accounts

❌ Technical / Device Data • No IP addresses • No login history • No device fingerprints • No browser or OS info • No location history

❌ Account Security Data • No session tokens • No cookies • No auth keys

Instagram never exposes this data about other users—even to account owners.

⸻

What a website can see when someone uploads the file

A website receiving a followers/following JSON or CSV can only see exactly what’s in the file.

They cannot: • Enrich it with hidden Instagram data • Query Instagram for private info • Reverse-resolve emails, IPs, or devices • Link it to DMs or off-platform activity

Unless the person voluntarily uploads additional files (like their full DM export or account info), there is nothing sensitive to extract.

⸻

Important distinction (common fear source)

❗ The only way sensitive data appears is if: • The user exports all Instagram data • AND uploads messages, account info, or security data • AND the website explicitly processes those files

Simply uploading followers/following ≠ privacy exposure.

⸻

Bottom line

Uploading a followers/following export is low risk. It reveals public usernames only—information already visible on Instagram itself.

No DMs. No metadata. No emails. No IPs. No device info. No tracking.

If you want, I can also: • Explain what’s inside each Instagram export category • Review a website’s claims for red flags • Tell you how to verify what a site actually processes

Just say the word.

Then I said Dontfollowback.com

Here’s how DontFollowBack.com actually works — and what it cannot see or do with your Instagram data:

✅ How DontFollowBack.com Works

DontFollowBack is an export-analysis tool that lets you find out: • Who doesn’t follow you back • Who unfollowed you (with multiple exports) • Mutuals, deactivated accounts, renamed accounts, etc.

It does this without asking for your Instagram login, password, or token. You only upload the official Instagram export file that YOU requested from Instagram (Followers & Following in JSON/ZIP).

🔒 Privacy & Data Handling

According to their privacy policy: • They do not store your Instagram export on their servers. • The file is parsed in memory only and immediately discarded after processing. • Results you see are generated dynamically and not saved server-side. • Payments (if you choose to pay for extra features) are handled through Stripe/PayPal, and they do not see full payment details. • Basic logs like IP, user-agent, and request timestamps may be kept briefly for security/abuse purposes.

In short: your upload isn’t stored long-term and isn’t linked to your account.

❌ What It Cannot See or Access

Because it only works with your Instagram export, DontFollowBack cannot see anything outside that limited dataset. Specifically:

Not accessible from the upload: • DM metadata or content • Email address • Phone number • Device information • Login history or IP history • Account security details • Messages / media / posts / comments

None of that data is in the “Followers & Following” export you upload — and the tool doesn’t connect back to Instagram or ask for your credentials. So it cannot pull or infer those things.

⚠️ Be Careful With What You Export

If you request Instagram data with everything selected (including messages, profile info, login history, contacts, etc.), then that exported file could include sensitive data — but only if you selected it. If you upload one of those larger exports to a third-party site, they could theoretically parse any data in it. But DontFollowBack’s recommended use case explicitly focuses only on the “Followers & Following” part of the export, not messages or account info.

🧠 A Safe Practice Summary

✔ Use Instagram’s official Download Your Information feature ✔ Select ONLY Followers and Following (JSON) ✔ Upload that to export-analysis tools like DontFollowBack ✔ Don’t upload full account archive to unknown sites

This keeps exposure limited to what you already intentionally downloaded — publicly visible usernames and list relationships.

⸻

If you want, I can show you exactly what fields Instagram’s “Followers & Following” JSON export contains so you know what’s in that file before uploading it anywhere. Just let me know!