}

Privacy Policy for the Resellr Chrome Extension

This English template is intended for the Chrome Web Store listing and extension privacy disclosure. Replace all placeholders with the final legal and operational details before publication.

Controller

• Company: [COMPANY_NAME]
• Address: [ADDRESS]
• Contact: [EMAIL]
• Privacy contact: [PRIVACY_EMAIL]

Why the extension needs permissions

• cookies: to read and sync the user's Vinted session state after explicit pairing
• storage: to save pairing status, consent state and local job metadata on the user's device
• alarms: to trigger scheduled health checks and long-polling jobs
• scripting and host permissions for *.vinted.*: to execute user-requested actions on Vinted pages only

Data categories processed by the extension

• Vinted session tokens and related security metadata, encrypted with AES-256-GCM before transmission
• Item and listing metadata required to synchronise products between Vinted and Resellr
• Technical logs such as pairing status, job execution timestamps and extension health events

Purposes and legal bases

• Contract performance: deliver the subscribed Resellr automation and synchronisation features
• Legitimate interests: secure the extension, detect abuse and diagnose product issues
• Consent where required: optional analytics or marketing technologies, if enabled in the future

Third parties and processors

• Hosting provider: [HOSTING_PROVIDER]
• Stripe for billing of the associated Resellr subscription
• Sentry for error monitoring
• Resend for transactional e-mail communication

Retention

• Session tokens: until disconnect, rotation or expiry, and no longer than [SESSION_RETENTION]
• Extension logs: [LOG_RETENTION]
• Account-linked data: until account deletion or the expiry of statutory retention duties

Chrome Web Store commitments

• We do not sell user data.
• We do not transfer user data to third parties except as required to operate the service.
• We do not use user data for advertising outside the core functionality of the extension.
• We do not use user data for creditworthiness or lending decisions.

User rights

Users may request access, correction, deletion, restriction, portability or object to processing under applicable law. Requests can be sent to [PRIVACY_EMAIL].