Saved Posts Downloader

Saved Posts Downloader

ID: alkgglonfjgmdolnjafmbmldmmalhdoi

Supported Languages

πŸ‡§πŸ‡·Brazilian Portuguese
πŸ‡ΉπŸ‡ΌChinese (Traditional)
πŸ‡ΊπŸ‡ΈEnglish
πŸ‡«πŸ‡·French
πŸ‡©πŸ‡ͺGerman
πŸ‡―πŸ‡΅Japanese
πŸ‡΅πŸ‡ΉPortuguese
πŸ‡ͺπŸ‡ΈSpanish
πŸ‡ΉπŸ‡·Turkish

Extension Info & Metadata

Status
Active
Version
2.1.0
Size
0.28 MB
Rating
4.0/5
Reviews
7
Users
206
Type
Extension
Updated
Jul 16, 2026
Category
Productivity Tools
Price
Free
Featured
Yes
Visibility
Listed
Mature
No
By Google
No
Trusted
Yes

Publisher Contextual Analysis

Trusted
Author
https://superwebscraper.comView Profile
MX records exist
Yes
Domain exists
Yes
Is disposable
No
Is role-based
Yes
Mailbox exists
Yes
Website
Visit
Total Extensions
7
Active
7
Obsolete
0
Listed
7
Unlisted
0
Total Users
2,367
Screenshot 2
Screenshot 3
Screenshot 4
Screenshot 5

Instagram Saved Posts Downloader – Download Saved Instagram Photos & Videos Instantly

πŸ“€ Instagram Saved Posts Exporter – Save & Download All Your Saved Instagram Posts Easily Tired of losing track of your favorite Instagram content? ✨ Instagram Saved Posts Exporter is the ultimate extension that lets you export, back up, and download all your saved Instagram photos, videos, and reels automatically with one click. Built for creators, marketers, and everyday users who want to organize and keep their Instagram saved posts offline, this tool is fast, secure, and user-friendly. 🌟 1. What Is Instagram Saved Posts Exporter? Instagram Saved Posts Exporter is a powerful Instagram downloader extension that helps you: πŸ“ Export your entire list of saved posts instantly πŸ“Έ Download all saved photos, videos, and reels 🧩 Organize downloaded content into folders by username πŸ’Ύ Save files in high resolution with original quality πŸ›‘οΈ Enjoy 100% private, local-only processing β€” no data ever leaves your browser ⚑ 2. Key Features & Benefits 1️⃣ One-Click Export – πŸ“€ Download all your saved Instagram posts instantly, no copying links or manual saves. 2️⃣ Auto-Folder Organization – πŸ—‚οΈ Files are neatly sorted by username so your saved collections stay organized. 3️⃣ High-Quality Downloads – πŸ“· Save images and videos in original, watermark-free quality. 4️⃣ Fast & Lightweight – πŸš€ Works seamlessly on Instagram.com with no lag or popups. 5️⃣ Full Privacy Protection – πŸ”’ Local-only processing with no tracking, no analytics, and no data collection. 6️⃣ Select Collections Only – 🎯 Choose specific saved collections to download instead of exporting everything at once. 🎯 3. Who Can Benefit from Instagram Saved Posts Exporter πŸ‘©β€πŸŽ¨ Creators & Influencers – Save creative ideas and inspiration for future content. πŸ“ˆ Social Media Managers – Archive marketing visuals and competitor insights. πŸ›οΈ Online Shoppers – Keep track of favorite product posts or reels. πŸŽ“ Researchers & Educators – Collect and organize examples for projects. πŸ’Ύ Everyday Users – Back up your saved Instagram content before it’s gone. 🧭 4. How to Use Instagram Saved Posts Exporter πŸ“Œ Step 1: Install the extension. πŸ“Œ Step 2: Go to your Instagram β€œSaved” tab. πŸ“Œ Step 3: Click β€œExport Saved Posts.” πŸ“Œ Step 4: Wait a few seconds β€” your saved photos and videos will download automatically! It’s simple β€” no third-party sites, no login, and no technical setup required. πŸ’Ž 5. Why Choose Instagram Saved Posts Exporter βœ… One-click export of all saved posts βœ… Works directly on Instagram.com βœ… No login or registration required βœ… Ad-free, lightweight, and secure βœ… Perfect for productivity, creativity, and data backup With smooth integration and optimized performance, Instagram Saved Posts Exporter is the easiest way to download saved Instagram posts safely and efficiently. πŸ’Ž 6. Go Pro Upgrade to Pro and enjoy: - Unlimited images download - Unlimited videos download - Download selected collections - Priority support πŸ” 7. Privacy & Security πŸ’» 100% local processing inside your browser ❌ No cloud uploads or external servers ❌ No personal data collection or tracking βœ… Your privacy and saved content remain completely under your control ⚠️ 8. Legal Notice Instagram Saved Posts Exporter is an independent extension not affiliated with Instagram or Meta Platforms, Inc. Please follow Instagram’s Terms of Use and only export content you own or have permission to download.

Item
Type
Severity
Description
webRequest
Permission
Critical
This permission enables the extension to monitor and analyze all web requests made by the browser. Rated Critical because it can observe all network traffic including sensitive data, track browsing behavior, and gather authentication tokens.
cookies
Permission
High
This permission provides full access to read and modify browser cookies. Rated High because it can steal session tokens, modify authentication cookies, and compromise accounts across websites.
downloads
Permission
High
This permission controls file downloads and accesses download history. Rated High because it can download malicious files, access sensitive downloaded documents, and track user download patterns.
Contextual Risk Factors
Risk Factor
High
The following context increases the overall risk:β€’ 20% increase: Access to sensitive domains increases potential impact
storage
Permission
Medium
This permission allows storing data locally in the browser. Rated Medium because it can persist sensitive user data, track user activities over time, and potentially store malicious payloads.
*://*.superwebscraper.com/*
Host
Medium
Host permission β€” access limited to this URL pattern.
*://*.instagram.com/*
Host
Medium
Host permission β€” access limited to this URL pattern.
Access to Sensitive Domains
Risk Factor
Medium
This extension requests access to sensitive domains: *://*.instagram.com/*

The bundled CRX manifest declares content-script-10075cbf.js, but the published CWS listing manifest summary shows content-script-909eeeae.js β€” a different content-addressed filename indicating different file contents. Additionally, injected.js is listed as a web-accessible resource for <all_urls> but does not appear anywhere in the signed verified_contents.json file inventory, meaning it is declared but absent. A mismatch between the analysed package and the live CWS listing is itself a high-severity signal that the publisher may have pushed a different content-script version to the store without updating the packaged ZIP consistently.

manifest.json (Line 30)
{  "web_accessible_resources": [    {      "matches": [        "<all_urls>"      ],      "resources": [        "google.svg",        "icon.svg",        "excel.svg",        "csv.svg",        "json.png",        "injected.js",        "youtube.svg",        "discord.svg"      ],      "use_dynamic_url": false    },    {      "matches": [        "*://*.instagram.com/*"      ],      "resources": [        "assets/constants-c5ba7627.js",        "assets/browser-b5024e97.js",        "assets/content-script-10075cbf.js"      ],      "use_dynamic_url": false    }  ]}

The webRequest onBeforeRequest listener (T) specifically targets Meta's Facebook Groups GraphQL query names (GroupsCometMembersPageNewForumMembersSectionRefetchQuery, CometProfilePlusNonRegularVideosRootQuery) on instagram.com/api/graphql, capturing fb_dtsg (Meta CSRF token), av (authenticated user ID), doc_id, and variables. These are Facebook Groups-specific internal query names with no relation to Instagram saved posts; capturing fb_dtsg and av gives enough context to authenticate arbitrary Meta GraphQL calls on behalf of the user. The data is stored in chrome.storage.local and consumed by the missing content-script, whose behaviour cannot be verified. This is outside the extension's disclosed scope and the CWS-disclosed 'Personally identifiable information' collection does not identify CSRF tokens or Meta actor IDs as collected data categories.

assets/service-worker-415a9f1c.js (Line 10)
const d = {    posts: "GroupsCometMembersPageNewForumMembersSectionRefetchQuery",    reels: "GroupsCometMembersPageNewMembersSectionRefetchQuery",    tagged: "CometProfilePlusNonRegularVideosRootQuery"  },  T = e => {    var c, s;    if (e.method !== "POST" || !e.url.includes("api/graphql")) return;    const t = (c = e.requestBody) == null ? void 0 : c.formData,      a = _(t, ["fb_api_req_friendly_name", "av", "fb_dtsg", "doc_id", "variables"]);    if (!Object.values(d).includes(a.fb_api_req_friendly_name)) return;    const o = (s = Object.entries(d)      .find(([, i]) => i === a.fb_api_req_friendly_name)) == null ? void 0 : s[0];    o && chrome.storage.local.get(["requests"], ({      requests: i = []    }) => {      Array.isArray(i) || (i = []);      const n = e.tabId;      let l = !1;      const h = i.map(u => u.tabId === n ? (l = !0, {        ...u,        [o]: a      }) : u);      l || (h.push({          tabId: n,          [o]: a        }), h.length > 100 && h.splice(0, h.length - 100)),        chrome.storage.local.set({          requests: h        })    })  };

By severity

Critical0
High1
Medium1
Low0

Versions scanned

Showing 1 of 9 scanned versions with more than one unique finding. Counts are unique findings that include each version.

Extension VersionCode Review Findings
2.1.02

Files with findings

2 distinct paths β€” top paths by unique finding count:

  • assets/service-worker-415a9f1c.js1
  • manifest.json1
S.No.
Category
Severity
File
Summary
Found in Version
1Other
high
manifest.json (line 30)The bundled CRX manifest declares content-script-10075cbf.js, but the published CWS listing manifest summary shows content-script-909eeeae.js β€” a different content-addressed filename indicating different file contents…
2Unauthorized Data Collection
medium
assets/service-worker-415a9f1c.js (line 10)The webRequest onBeforeRequest listener (T) specifically targets Meta's Facebook Groups GraphQL query names (GroupsCometMembersPageNewForumMembersSectionRefetchQuery, CometProfilePlusNonRegularVideosRootQuery) on inst…
URLs
90
IPv4
1
IPv6
0

URLs

View the external URLs this extension communicates with to understand its network activity and data interactions.

Gain full insight into all external connections.

Upgrade for full visibility.

reactjs.org/docs/error-decoder.htmlhttps://reactjs.org/docs/error-decoder.html?invariant=
www.w3.org/1999/xlinkhttp://www.w3.org/1999/xlink
www.w3.org/XML/1998/namespacehttp://www.w3.org/XML/1998/namespace
www.w3.org/2000/svghttp://www.w3.org/2000/svg
www.w3.org/1998/Math/MathMLhttp://www.w3.org/1998/Math/MathML
www.w3.org/1999/xhtmlhttp://www.w3.org/1999/xhtml
i.instagram.com/api/v1/users/web_profile_info/https://i.instagram.com/api/v1/users/web_profile_info/?username=${e}`,{mode:
www.instagram.com/p/$%7Bt%7D/%60,b=newhttps://www.instagram.com/p/${t}/`,b=new
localhost-http://localhost:9999
developer.mozilla.org/en-US/docs/Web/API/LockManager/requesthttps://developer.mozilla.org/en-US/docs/Web/API/LockManager/request
Showing 1 to 10 of 90 rows
Rows per page:

Gain full insight into all external connections.

Upgrade for full visibility.

3.5.7.7
IPv4
-
Showing 1 to 9 of 10 rows
Rows per page:

Code Diff

Compare extension code between any two versions.

0 changed files (scanned top 25 shared text files)

No comparable text files found between these versions.

Browse and explore files within this extension package

Gain full insight into all external connections.

Upgrade for full visibility.