← Resale IQ

Privacy Policy

Last updated: 1 September 2026

Chrome extension

On Vinted item pages we read the public title, brand and asking price already on the page, and send that query to resaleiq.dev to look up a buy-below price. We do not read your Vinted account, cookies or messages. If you sign in at resaleiq.dev, the extension stores your session token on this device only (not in Chrome sync) so checks count against your plan. The token is sent only to resaleiq.dev. The extension contacts no other host. If the panel fails to render on a listing page — never on a successful check — the extension separately sends resaleiq.dev a fixed reason code (one of three preset values, never text taken from the page or the error itself) and the two-letter market, so we find out when Vinted changes its layout instead of the panel silently going blank. That report carries no listing content, no session token and no account identifier: it is sent by the extension's background process rather than the page itself, so it carries none of the page's Vinted context either. Like any request our servers receive, it still arrives with the sending device's IP address.

What we collect

Your email address, a securely hashed password (never stored in plain text), your subscription status via Stripe, and product-usage events (searches, watchlist and portfolio entries you create). We do not collect payment card details — those are handled entirely by Stripe.

How we use it

To provide the service, authenticate you, process your subscription, send account and product emails, and improve the product. We do not sell your personal data.

Data you create

Watchlists, portfolio items, and searches are private to your account. You can export all your data or delete your account at any time from the account page (GDPR rights to access and erasure).

Third parties

We use Stripe (payments), Resend (transactional email), and hosting infrastructure. Each processes data only to deliver its function. We do not sell or transfer personal data to other third parties.

Your rights

Under GDPR you may request access to, correction of, or deletion of your personal data. Account deletion removes your personal data from our active systems.

Contact

For any privacy request, use the data controls on your account page or contact support.

Terms of Service →