Privacy policy
Last updated: 2026-09-17
This policy describes what data Vinted Manager collects, why, who it is shared with and how long
it is kept. It covers both the website vintedmanager.com and the browser extension
Vinted Manager Connector.
Vinted Manager is not affiliated with, endorsed by, or part of Vinted. It is an independent tool for sellers who already have their own Vinted account.
Data controller
88 Miles Holding B.V. (trading as Vinted Manager)
Dordrecht, Netherlands
Chamber of Commerce (KvK): 74887459
Email: [email protected]
Single purpose of the extension
The extension has one purpose: to link your own Vinted session to your own Vinted Manager account, so that Vinted Manager can manage and prepare your own listings on your behalf. Preparing means the extension fills in Vinted's own listing form with the listing you built in Vinted Manager, and then hands that form back to you. The extension never presses Publish — you do. No data is collected that is not strictly necessary for that purpose.
What we collect
Vinted authentication data
The extension reads two cookies from your browser, on whichever Vinted country domain you are
signed in to — vinted.nl, vinted.be, vinted.de and Vinted's
other country domains: access_token_web and refresh_token_web. No other
cookie is read. These are transmitted to the
Vinted Manager servers and stored encrypted (Fernet symmetric encryption). They are
used for one thing only: acting on Vinted on your behalf — reading, updating and preparing your own
listings.
This is sensitive data. It grants access to your Vinted account. Therefore:
- it is never shared with any third party;
- it is never sold, and never used for advertising or profiling;
- it is never read by a human, except where you explicitly ask us to during support, during a security investigation, or where the law requires it;
- you can delete it at any time via Settings → Disconnect, which removes it from the database immediately.
Data while a listing is being prepared
While a listing is being prepared, the extension reads the Vinted form it is filling in: which fields are still empty, so the panel can tell you what is missing. That stays in your browser and is sent nowhere.
To establish which listing was actually created on Vinted, the extension also reads the links on your own Vinted profile page, and only that page, looking for the listing with the title that was just submitted. Only that single matching link leaves your browser.
What goes to Vinted Manager is limited to what is needed to record what happened to your listing: the title, description and price that were submitted, the item id or link of the listing on Vinted, and whether the attempt succeeded. That is your own listing data, which you created in Vinted Manager in the first place.
Account data
Your email address and a hashed password (bcrypt), created when you register.
Listing data
Titles, descriptions, prices, categories, brands and photos for the listings you create or import in Vinted Manager.
Technical data
Vinted Manager's own session cookies (see the cookie policy), server logs containing IP address and timestamp, and error reports. Logs are deleted after 30 days.
What we do not collect
- No browsing history. The extension runs only on Vinted's country domains and on
vintedmanager.com, and has no access to any other site. - No keystrokes, no form data from other sites, no personal communications.
- No Vinted pages other than the listing form and your own profile page — the extension reads no messages, no orders, and no data belonging to other users.
- No payment details — those go directly to Mollie and never reach our servers.
Who we share data with
| Party | Purpose | Data |
|---|---|---|
| Vinted | Acting on your own account on your behalf | Your Vinted session and listing data |
| Mollie | Subscription and credit-pack payments | Name, email, payment details (collected directly by Mollie) |
| Brevo (previously MailerSend) | Transactional email and, only with your consent, product news | Email address, name and the content of the relevant email |
| Anthropic / OpenAI | AI photo analysis and search assistance through the configured AI provider | Photos and item or search information needed for the requested analysis |
| Hosting provider | Running the service | The application data described above; Vinted credentials are stored encrypted |
We do not sell data and we share nothing with advertisers or data brokers.
Legal basis (GDPR)
- Performance of a contract — your account, listing management, the Vinted link.
- Consent — linking your Vinted session, and advertising cookies.
- Legitimate interest — security, abuse prevention, debugging.
Email we send
Two kinds, and the difference matters:
- Account email — address verification, password resets, invoices and important service notices. These belong to the service you hold an account for and cannot be switched off while the account exists.
- Product news — only if you actively opted in, either at registration or in Settings. The box is unticked by default. Every one of these carries an unsubscribe link that works without logging in, and unsubscribing takes effect immediately.
We do not treat the absence of an objection as consent: accounts that existed before this choice was offered are opted out.
Retention
- Vinted session data: until you disconnect or delete your account.
- Account and listing data: until you delete your account.
- Server logs: 30 days.
- Invoicing records: 7 years (statutory retention).
Your rights
You have the right to access, rectify, erase, restrict, object to and port your data. Email [email protected] and we will respond within 30 days. You may also lodge a complaint with the Dutch Data Protection Authority.
Changes
If we change how we handle your data we will tell you in advance by email and in the app — not by quietly editing this page.