FlowConsent
How it worksPricingComparisonsBlogDocumentationLog inTry FlowConsent
Try FlowConsent
Social media

Instafeed

PreferencesOfficial website

Instafeed is a Shopify app that displays an Instagram feed on a store, including shoppable galleries that link posts to products. Rendering the feed loads content from Instagram and Meta, which can set cookies and receive visitor data, and the app sets its own cookies to cache and configure the widget. Under the GDPR and the ePrivacy Directive, these non essential cookies and the Meta connection require prior consent.

Block Instafeed until consentScan my site
Overview

What does Instafeed do?

What is Instafeed?

Instafeed is an application, primarily for Shopify, that embeds an Instagram feed on a storefront. It can show a brand latest posts, user generated content and shoppable galleries that connect Instagram images to products. Merchants use it to add social proof and drive sales from their Instagram presence.

What data and cookies does it collect?

To display the feed, Instafeed loads images and scripts from Instagram and Meta, which can set their own cookies and receive the visitor IP address, browser data and the page being viewed. Instafeed also sets cookies to cache the feed and remember widget settings. When content is loaded from Meta, the visitor browser communicates with Meta servers.

GDPR and ePrivacy implications

The Instafeed cache cookies and any cookies set by the embedded Meta content are not strictly necessary, so they fall under Article 5(3) of the ePrivacy Directive and require consent. The connection to Meta can transmit visitor data to a third party, so prior consent is needed before the feed loads, not only for the cookies but for the data sharing.

Consent requirements

Block the Instafeed widget and the embedded Instagram content until the visitor has accepted the relevant cookie categories in a Consent Management Platform. The feed should load only after consent, so that no Meta resources are contacted and no cookies are set beforehand. Log consent and allow refusal as easily as acceptance.

Data transfers

Because the feed loads content from Instagram and Meta, rendering it can transfer visitor data to Meta in the United States. These transfers must rely on Standard Contractual Clauses or the EU US Data Privacy Framework, supported by a Transfer Impact Assessment. Where possible, prefer a configuration that proxies or caches images to limit direct contact with Meta.

Practical compliance steps

List the Instafeed and Meta cookies and domains in your cookie policy and gate the feed behind consent. Use a CMP that defers the widget until opt in, document the Meta data sharing and transfer safeguards, and inform visitors that the feed connects to Instagram. Review the integration when Instafeed or Meta change how the feed loads.

Compliance

Instafeed and the GDPR

Instafeed is classified as “Preferences”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy.

Legal basis
Consent (Art. 6(1)(a) GDPR)
Risk level
medium
Applicable regulations
GDPR, ePrivacy Directive (Cookie Law)

Impact assessment (DPIA)

Instafeed loads content from Instagram and Meta, which can set cookies and receive the visitor IP address, browser data and the page being viewed. Key DPIA considerations: (1) the Instafeed cache cookies and embedded Meta cookies are not strictly necessary and require consent; (2) the connection to Meta transmits visitor data to a third party; (3) data may be transferred to the United States, requiring safeguards; (4) a cached configuration reduces direct contact with Meta. A DPIA is advisable.

Sample text for your banner

We use Instafeed to display our Instagram feed. Instafeed sets cookies and loads content from Instagram and Meta, which can transmit data to Meta in the United States. You can withdraw your consent to non essential cookies at any time through our cookie settings.
Cookies and trackers

What Instafeed sets and contacts

Tracking method
JavaScript Instagram feed widget and cookies
Server location
United States (Instafeed app; embeds Instagram and Meta content)
Data transferred outside the EU
Instafeed displays Instagram content and connects to Meta APIs, so loading the feed can involve Meta resources and transfers of personal data to the United States. Transfers rely on Standard Contractual Clauses or the EU US Data Privacy Framework with a Transfer Impact Assessment.

Cookies set (3)

NameTypeDurationPurpose
instafeed_cacheFunctional7 daysCaches the Instagram feed so it loads faster on repeat visits.
instafeed_widgetFunctional1 yearRemembers the widget configuration and display state.
_fbpAdvertising3 monthsSet by Meta when Instagram content is loaded, used for cross site tracking and advertising.

Third-party domains contacted (4)

  • instafeedapp.com
  • www.instagram.com
  • scontent.cdninstagram.com
  • graph.facebook.com
Questions

Frequently asked questions about Instafeed

Can't find your question? Write to us, we answer fast.

What cookies does Instafeed set?

Instafeed sets cookies to cache the feed and remember widget settings, and the embedded Instagram and Meta content can set its own cookies. These are not strictly necessary, so they require consent. The Meta cookies in particular are associated with cross site tracking.

Does Instafeed require cookie consent?

Yes. The feed loads content from Instagram and Meta, which can set cookies and receive visitor data, so under the GDPR and the ePrivacy Directive prior consent is required. The widget should not load and no Meta resources should be contacted until the visitor accepts.

What is the legal basis for Instafeed?

The lawful basis is consent under Article 6(1)(a) GDPR, combined with Article 5(3) of the ePrivacy Directive for the cookies. Because loading the feed shares visitor data with Meta, legitimate interest is not sufficient and explicit opt in is required before the content loads.

Does Instafeed transfer data outside the EU?

Yes. Rendering the feed loads content from Meta in the United States, so visitor data can be transferred there. The transfer must rely on Standard Contractual Clauses or the EU US Data Privacy Framework with a Transfer Impact Assessment, and you should consider a cached or proxied configuration.

Do I need a DPIA for Instafeed?

A DPIA may not be mandatory for a simple feed, but it is advisable because the integration shares visitor data with Meta and can support cross site tracking. Documenting the data sharing, the cookies and the US transfer helps demonstrate accountability.

How do I implement Instafeed compliantly?

Load Instafeed through a CMP that blocks the widget and the embedded Instagram content until consent, so no Meta resources load beforehand. Disclose the Instafeed and Meta cookies and domains, document the US transfer safeguards, and prefer a cached configuration that limits direct contact with Meta.

Are there alternatives to Instafeed?

Other Instagram feed and user generated content apps include EmbedSocial, Elfsight, Tagembed and Foursixty, all of which face the same Meta connection considerations. A configuration that caches images on your own infrastructure rather than loading them live from Meta reduces the third party footprint.

How do I update my cookie policy for Instafeed?

Add the Instafeed and Meta cookies to your cookie policy with their purpose and duration, list the Instagram and Meta domains, and state that visitor data may be transferred to the United States. Explain that the feed connects to Instagram and keep the policy aligned with the configuration.

Same category

More services: Social media

See the whole category

Candid

Candid is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Candid integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Candid helps organizations maintain robust websites that meet user expectations and technical requirements.

Preferences

Viafoura

Viafoura is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Viafoura supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Viafoura ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Preferences

Facebook Login

Facebook Login is an identity and authentication platform providing secure login, single sign-on (SSO), and multi-factor authentication for websites and applications. It supports social login, passwordless authentication, and user management with enterprise-grade security. Facebook Login simplifies identity implementation for developers while ensuring compliance. With adaptive authentication and anomaly detection, Facebook Login protects user accounts while maintaining a frictionless experience.

Marketing

Misskey

Misskey is a foundational web service that powers critical website functions and digital experiences. It provides reliable infrastructure, seamless integration capabilities, and consistent performance across all devices and browsers. Misskey supports modern development practices and scales with growing business needs. With a focus on stability and compatibility, Misskey ensures your website delivers a smooth, uninterrupted experience to every visitor and search engine crawler.

Social media

Foursixty

Foursixty is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Foursixty provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Foursixty helps deliver the right message to the right audience at the right time.

Marketing

Pleroma

Pleroma is a web technology service that provides essential functionality for websites and digital platforms. It delivers core capabilities that support site operations, content delivery, and user experience optimization. Pleroma integrates seamlessly with modern web architectures, ensuring reliable performance and compatibility across browsers and devices. Trusted by businesses worldwide, Pleroma helps organizations maintain robust websites that meet user expectations and technical requirements.

Social media

Make your site compliant today.

Free up to 25,000 sessions a month. No credit card, no commitment.

Create my bannerScan my site