Principles
The Index exists to answer four questions about any anonymous Instagram viewer: does it work, does it require a login, does it track or collect data, and is it safe to visit. We answer them with observation, not opinion.
- Observable behavior only. A score reflects what the service actually does in a controlled test: the requests it makes, the trackers it loads, the redirects it triggers.
- Claims must be verifiable. Marketing copy and badges earn nothing unless we can independently confirm them.
- Private access is a red flag, not a feature. Instagram restricts private content to approved followers, so a promise to bypass that is penalized, never rewarded.
- The same test for everyone. Every viewer is run through the identical procedure so scores are comparable.
The 100-point score
Nine criteria each contribute a fixed number of points. The weights add up to 100 and are tilted toward the signals that matter most for safety: credential handling, redirects, and trackers.
The nine criteria
- No account or login requested: full score
- Optional registration: partial score
- Instagram credentials requested: zero, plus a warning
- No external redirects: full score
- Limited, disclosed redirect: partial
- Multiple ad/unknown redirects: major deduction
- Counts third-party trackers and ad networks
- Weighs analytics & fingerprinting indicators
- Fewer trackers scores higher
- No pop-ups: full score
- One non-deceptive pop-up: partial
- Repeated or deceptive pop-ups: major deduction
- Clear, accessible policy
- Identifies the operator
- Explains data collection & third parties
- Search & IP/device retention disclosed
- Deletion process explained
- No disclosure: reduced score
- States public-only support clearly
- No implied private-profile access
- No misleading verification/survey flows
- Search works and stories load
- Results match the requested public profile
- No fabricated or false loading
- No advertising: full score
- Limited advertising: partial
- Obstructive or deceptive ads: low score
Score bands & status
The 0-100 score maps to a plain-language status that appears next to every viewer in the rankings and reviews.
A service that fails to return real results during repeated tests is marked Not Working regardless of its other signals, because reliability is a precondition for everything else.
How a test cycle runs
Each viewer is tested the same way, on both mobile and desktop, in a fresh browser profile with no prior history.
- Fresh environmentA clean browser profile, no cookies or extensions, on a current mobile and desktop viewport.
- Request a known public profileWe search for a public account whose content we can independently verify, then attempt to load its stories or posts.
- Record every signalLogin prompts, pop-ups, the full redirect chain, and every third-party tracker and ad network that loads.
- Capture evidenceScreenshots, tested URLs, timestamps, the request log, and privacy-policy extracts are saved with the review.
- Score and publishThe nine criteria are applied to produce a 0-100 score and a status, with the evidence attached.
Evidence we collect
Each full review is backed by the artifacts gathered during the test, not just an editor's verdict.
Retests & changes
- Monthly. Every listed service is retested each cycle, because websites change: a viewer can add trackers, start asking for a login, or quietly fix issues.
- On material change. A significant functionality change triggers an out-of-cycle retest.
- History stays visible. Past scores are not deleted, so you can see whether a service is improving or sliding.
See the Monthly Reports for what moved in the latest cycle, and the Corrections Policy for how we handle disputed results.
Limitations
- Scores describe behavior during the stated test period. A site can change after publication.
- We test the experience a normal visitor gets; we do not audit a service's backend or internal data practices beyond what is observable and disclosed.