Privacy
OnlyStars lets someone verify that they control an Instagram profile associated with a community-created token, and then claim attributable trading-fee rewards. This page describes the data that flow actually stores.
Verification uses Instagram Login with the instagram_business_basic permission. After you authorize the app, OnlyStars receives the professional-account id, the app-scoped id, the username, and the account type from Meta. The access token is used once on the server to read that identity and is not stored. A separate server lookup, Business Discovery on Instagram API with Facebook Login, reads the professional-account id of the listed profile. Ownership is those two ids matching. A username match alone is not treated as ownership.
Removing the app marks Instagram access as revoked. It does not delete earned rewards or change an authorized payout wallet. You can verify again with the same account. A Meta data-deletion request removes the app-scoped id and is recorded at /instagram/data-deletion. OnlyStars keeps the professional-account id, the verification record, reward balances, and any authorized payout wallet, because those are required to pay rewards that were already earned.
Wallets and listings
A wallet signature proves control of that wallet for this session. It does not by itself authorize payouts. Payout wallets are authorized in a separate signature. Profile imports store the public listing, including the imported profile id. That imported id is a different identifier from the Instagram Login ids and is not enough to verify ownership.