Security and privacy

The founding choice

Vintedge never has your Vinted credentials. There is no Vinted login form in the product, and there will not be one.

Every action goes through your browser, with your existing Vinted session. That is what explains the product's main constraint: Chrome has to be open for anything at all to happen.

The alternative — asking for your credentials so we could act from a server — would be more comfortable and far riskier. It is a trade-off we accept.

What the extension reads on Vinted

What you see yourself while logged in:

your listings, your sales, your purchases;
your conversations and your messages;
your notifications (to detect favorites);
your paid promotions (Boost, Showcase).

It does not read other users' data, and accesses no site other than Vinted, vintedge.app and — if you allow it — Gmail.

What is sent to the dashboard

What the dashboard has to display: sales, purchases, items, conversations and messages, agent statuses, promotions.

Never transmitted: your Vinted password, your session cookies, your payment methods, the content of your browsing outside Vinted.

Where it is stored

On a PostgreSQL database hosted at Supabase, in Europe, with partitioning at the database level: every user data table is protected by a rule that technically prevents reading another account's rows. It is not only a filter in the application code.

The backed-up photos live on dedicated object storage.

The permissions you grant

Chrome — detailed in Install the extension. The essentials: access to Vinted sites, local storage, tabs, scheduling, downloads.

Gmail — optional and read-only. It is only used to find collection codes in the emails containing one of your tracking numbers. Vintedge sends, modifies and deletes no email. Revocable at any time from the extension settings or from your Google account.

Discord — optional, for granting the community role.

Stripe — payment. Vintedge neither sees nor stores any card number.

Your photos and their metadata

The photos you publish often contain invisible information: phone model, date, and sometimes the GPS position of where the photo was taken — which, most of the time, means your home.

Vintedge removes this metadata by default, both on reposting and on publishing from the Poster. It is a setting you can change, but one you are better off leaving as it is.

What you show to others

The only public surface is the leaderboard. You control entirely what appears there: username or anonymity, detailed figures or not, badges, or complete withdrawal. See Leaderboard and affiliate.

No other data is visible to other users.

The AI

When the AI assistant generates a reply, it receives the necessary context: the incoming message, an overview of the conversation, the item's characteristics, and your facts. It does not receive your full history or your financial data.

The Poster's AI receives the photos and the information of the product concerned.

Erasing your data

Cancelling the subscription stops the service and keeps your data.

Deleting the account (Security page) erases your account, your synced data and your backups. It is permanent, and it obviously does not touch your Vinted accounts.

Export what you want to keep first: sales, purchases and stock as CSV, invoices as ZIP.

Vintedge is not affiliated with Vinted

Vintedge is an independent product. It is neither published, nor endorsed, nor supported by Vinted.