Version 1.0

WardrobeFlow Privacy Notice

Effective: 16 September 2026

Controller: WardrobeFlow Service Provider, Italy. Privacy contact: the WardrobeFlow support contact displayed in the Chrome Web Store listing.

1. Scope

This notice explains how WardrobeFlow processes personal data through its website, account service, browser extension, billing integration and security/support functions. Third-party marketplaces process data under their own terms and privacy notices.

2. Data processed

Depending on the features you use, WardrobeFlow may process WardrobeFlow account identifiers and profile information; authentication and session metadata; an extension installation identifier; hashed extension access/refresh-token material; short-lived pairing/login metadata; subscription status and Stripe customer/subscription references; legal-document acceptance records; limited security/audit information; and information you voluntarily provide for support.

The extension also handles marketplace content inside your browser when necessary for its disclosed inventory, analytics, listing, draft, photo, sales and messaging functions. This can include marketplace identifiers, listings, drafts, photos, order/sales information and private conversations. WardrobeFlow is designed so this marketplace workflow data remains local to the extension unless a feature clearly states that server processing is required.

3. Data WardrobeFlow does not request for these purposes

WardrobeFlow does not ask you to provide your Vinted password. It does not intentionally send your marketplace password or browser session cookies to the WardrobeFlow backend. Payment-card and bank-account details are handled by Stripe rather than stored by WardrobeFlow.

4. Purposes and legal bases

Account, authentication, extension pairing, subscription entitlement and requested product features are processed as necessary to provide the service and perform the user agreement. Security, fraud/abuse prevention, diagnostic and reliability processing is carried out where necessary for WardrobeFlow's legitimate interests in protecting users and the service, subject to applicable rights. Billing/accounting information may also be processed to comply with legal obligations. Where consent is legally required for a specific future feature, it will be requested separately rather than treated as a catch-all basis.

5. Service providers and recipients

WardrobeFlow uses infrastructure providers for hosting/deployment, managed PostgreSQL/authentication, payment processing, and source-control/CI operations. The current production architecture uses Vercel for hosting, Neon for PostgreSQL and managed authentication, Stripe for payment/subscription processing, and GitHub for source control/CI. Enabled sign-in providers may receive authentication requests according to their own privacy notices.

WardrobeFlow does not sell personal data and does not provide marketplace content, private messages or browsing activity to advertising platforms, data brokers or information resellers.

6. International transfers

Some service providers may process data outside your country. Where GDPR or equivalent transfer rules apply, WardrobeFlow relies on the transfer mechanisms and safeguards made available by the relevant provider and required by applicable law. Provider locations and safeguards may change and should be read together with the providers' current privacy documentation.

7. Retention

Access credentials are short-lived and opaque; the backend stores hashes rather than reusable plaintext extension tokens. Pairing/login requests are temporary and expire automatically. WardrobeFlow retains account and active subscription data while needed to provide the service, legal-acceptance and billing records for applicable contractual/legal requirements, and limited security records for a bounded security-retention period. Expired ephemeral authentication and session records are subject to periodic deletion. Retention may be extended where reasonably necessary for an active dispute, security incident or legal obligation.

8. Security

WardrobeFlow uses HTTPS, managed authentication, server-side authorization, hashed opaque extension credentials, restricted browser permissions, security headers, environment-based secret management, bounded write workflows and abuse controls. No internet-connected system can be guaranteed completely secure.

9. Your choices and rights

You can stop using the extension and sign out at any time. Depending on applicable law, you may have rights of access, correction, deletion, restriction, objection and portability, and the right to withdraw consent where processing is actually based on consent. You may also complain to the competent data-protection authority. To exercise a privacy right, use the privacy contact above; reasonable identity verification may be required.

10. Chrome Web Store Limited Use

WardrobeFlow's use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. User data is used only to provide or improve WardrobeFlow's disclosed user-facing marketplace-management functionality and related security, reliability and support operations. WardrobeFlow does not sell user data, use it for personalized or retargeted advertising, provide it to data brokers, or permit human access to marketplace content except where the user specifically requests support, where necessary for security, or where required by law.

11. Automated decisions and advertising

WardrobeFlow does not use personal data to make solely automated decisions producing legal or similarly significant effects, and does not use marketplace content or browsing activity for personalized, retargeted or interest-based advertising or credit-worthiness decisions.

12. Age

WardrobeFlow accounts and paid subscriptions are intended for persons aged 18 or over. Do not create a WardrobeFlow account if you are under 18.

13. Changes

Material changes to this notice will be versioned and communicated where required. WardrobeFlow records the accepted version when renewed acceptance is necessary.

14. Contact

Privacy questions and rights requests: the WardrobeFlow support contact displayed in the Chrome Web Store listing.