1. Who we are
Vinted Bump is a browser extension operated by Mohamed Bouloudnine, a sole proprietor (« auto-entrepreneur ») based in France (registered under SIRET 948 251 350 00013).
Contact: mohamedbouloudnine3@gmail.com
Vinted Bump is an independent product and is not affiliated with, endorsed by, or sponsored by Vinted UAB.
2. Data we collect
2.1 Data collected automatically by the extension
- install_id: a random UUID generated locally on first launch. Anonymous, not tied to your identity.
- Successful repost count: local counter for usage statistics.
- First use timestamp: to compute your free trial duration (3 days).
2.2 Data collected during subscription
- Email address: to send your Premium activation ID and payment receipts.
- Stripe / PayPal customer ID: to link payment to your subscription.
2.3 Data we NEVER collect
- Your Vinted credentials (email, password, session cookies).
- Your credit card numbers (handled directly by Stripe/PayPal).
- The content of your listings or Vinted messages.
- Your listing photos (processed locally in your browser).
- Your browsing history.
- Any data for advertising or profiling purposes.
3. How we use your data
- install_id — Identify your subscription. Legal basis: contract performance.
- Email — Send your license, receipts, and support replies. Legal basis: contract performance.
- Stripe / PayPal IDs — Manage billing and renewals. Legal basis: contract performance.
- Repost counter — Aggregate usage statistics. Legal basis: legitimate interest.
4. Data retention
- install_id and counter: for the duration of your subscription, then deleted 30 days after cancellation.
- Email and payment IDs: 3 years after the last payment (accounting requirement).
- Billing records: 10 years (French tax law).
5. Sub-processors
We share data only with the following sub-processors, all GDPR-compliant:
- Stripe Payments Europe Ltd (Ireland) — payment processing. Stripe Privacy Policy
- PayPal (Europe) S.à r.l. & Cie, S.C.A. (Luxembourg) — payment processing. PayPal Privacy Policy
- Vercel Inc. (United States) — website and backend hosting. Data transfers covered by Standard Contractual Clauses. Vercel Privacy Policy
- Resend, Inc. (United States) — transactional emails. Resend Privacy Policy
We do not sell, rent, or share your data with third parties for commercial or advertising purposes.
6. Your rights under GDPR
Under articles 15 to 22 of the GDPR, you have the right to:
- Access your data,
- Rectify inaccurate data,
- Erase your data (right to be forgotten),
- Restrict processing,
- Data portability,
- Object to processing for legitimate reasons,
- Withdraw your consent at any time.
To exercise these rights, email mohamedbouloudnine3@gmail.com with proof of identity. We respond within 30 days.
You may also file a complaint with the French data protection authority (CNIL): cnil.fr/en/plaintes.
7. Permissions used by the extension
The Chrome extension requests the following permissions, and only for the purposes listed:
- activeTab: to interact with the Vinted page when you click the extension.
- tabs: to open the Vinted listing form during repost.
- scripting: to inject the helper code on Vinted pages.
- storage: to store your install_id and preferences locally.
- cookies: to read your Vinted session cookie locally (never transmitted).
- webRequest: to observe Vinted API headers (CSRF token) locally — read-only.
- notifications: to remind you when the free trial ends.
8. Security
Data is encrypted in transit (HTTPS/TLS) and at rest. API secrets (Stripe, PayPal) are never embedded in the extension code.
9. Policy updates
Material changes to this policy will be notified to Premium subscribers by email at least 15 days before they take effect.
10. Contact
For any privacy-related question: mohamedbouloudnine3@gmail.com