Privacy Policy
How we process data on the website, in the extension and its services. VintHelper is independent of Vinted.
Last updated: October 12, 2026
Data controller
The data controller is Bernabe Rodriguez. For privacy and deletion requests: [email protected]. Full provider details are in the legal notice.
Data and purposes
We process email, account and Vinted identifiers, plan, payments, preferences, limits and service usage. Features you choose may process listings, photos, orders, messages and offers. The extension uses your Vinted session; we do not ask for its password or store full card numbers. We store backups, settings, schedules, results and data needed for features you use, plus technical diagnostics, support communications and usage events. Not everything read from Vinted is stored on our servers.
Legal bases
Requested features and account management rely on the contract; billing relies on legal obligations. Security, abuse prevention, support and service improvement rely on our legitimate interests, respecting your rights. Optional website analytics rely on consent, which you can withdraw.
Providers
We use Google/Firebase for authentication, hosting, databases and storage; Stripe for payments; and Resend for operational emails. When you use AI features, Google Gemini receives the text, images or context needed for that feature. With your consent, Microsoft Clarity and Umami measure website usage. We do not sell your data or use it for personalized advertising.
Retention and transfers
We retain account data during our relationship and backups until you delete them or request deletion. Technical records are retained as needed for security, support and incidents. Tax documents and data needed for legal obligations or claims are retained for applicable statutory periods with restricted access.
Your rights and deletion
Email [email protected] to access, correct, erase or port your data, restrict processing or object where applicable. Request account deletion from its associated email: we will handle it within 15 days, except data we must legally retain. We may verify identity proportionately. Other rights are normally handled within one month, subject to lawful extensions. Withdrawal of consent does not affect previous processing.