Who is responsible for your data
Relisto is published by Julien Rousselot, sole trader (SIRET 934 525 890 00018), 39 avenue Clemenceau, 57100 Thionville, France. For any question or request about your data, contact relistocompany@gmail.com.
Privacy
Privacy Policy
Relisto is an extension that relists your own Vinted listings. This page explains exactly what data is processed, why, and by whom.
Last updated: July 29, 2026
Data processed locally (in your browser)
Relisto reads your active Vinted listings and saves a snapshot of each one (title, price, brand, size, condition, photos) in your browser's local storage, so it can relist them. Your settings, the current relist queue, and the activity log are stored the same way. None of this ever leaves your browser, except when you trigger a relist yourself — the listing is then sent to Vinted, the same way it would be if you did it by hand.
Data sent to Relisto (your account)
To use the extension, you create a Relisto account. Your name and email are sent to our backend to create and identify that account. Your password is transmitted over HTTPS and stored only as a salted hash — never in plain text, never sent back to the extension. A sign-in token is kept in the extension's local storage to keep you signed in.
Closet and usage data sent to Relisto
So that a plan can be enforced fairly, the extension registers the numeric id of the Vinted account (the "closet") you use it on, and reports counts back to us: how many listings the closet has, how many are old enough to relist, how many items have sold, and how many relists you have used this month. It also keeps an anonymous per-item counter — how many relists it took before an item sold — identified by a random id generated in your browser, not by the Vinted item. These are numbers only: no titles, no prices, no descriptions, no photos, no buyer or message data ever leaves your browser. The one exception is the publisher's own administrator account, which stores its own listing content for personal margin tracking; that is not enabled for, and cannot be enabled by, any other account.
Billing data (if you take a paid plan)
If you switch to a paid plan, payment is handled by Stripe — Relisto never sees your card number. Stripe passes us your name, billing address, and the type of card used (e.g. Visa •••• 4242), which we keep to issue your invoices and meet our accounting obligations.
IP address and approximate location
On every sign-in and every call the extension makes to our backend, your IP address is recorded along with a country derived from it. This is used only for account security and compliance purposes — never for advertising targeting. The IP address itself is erased automatically 30 days after your last activity; only the country, which does not identify you, is kept after that.
Analytics and cookies
Our website relistoapp.com can measure aggregate traffic (page views, traffic sources) using Google Analytics via Google Tag Manager, and PostHog, hosted in the EU. Neither is loaded until you accept in the banner shown on your first visit: if you decline, no analytics script is loaded and no analytics cookie is set. You can change your mind at any time via the "Cookies" link at the bottom of any page. The extension itself contains no analytics or telemetry of any kind.
Who your data is shared with
Relisto relies on a small number of technical providers, solely to run the service: Stripe (payment and billing), Resend (transactional emails such as subscription confirmations), Railway (hosting the backend and database), and — on the website only, and only with your consent — Google Analytics via Google Tag Manager and PostHog for aggregate traffic statistics. None of your data is sold, and none of it is used for advertising.
What Relisto does not do
No ad tracking, no reselling of data, no building of advertising profiles. Website analytics (see "Analytics and cookies" above) is limited to aggregate statistics and requires your consent. Your listing content — titles, prices, descriptions, photos — is never sent to us: the extension keeps it in your browser and only ever sends counts (see "Closet and usage data" above). Relisto never asks for or stores your Vinted password, and never stores your Relisto password on your machine — the extension uses your browser's already-signed-in Vinted session and a revocable sign-in token. No access to your browsing history outside of Vinted.
How long your data is kept
Data stored locally (listings, settings, log) is deleted when you uninstall the extension or clear its storage. Your account data is kept for as long as the account exists. IP addresses are erased 30 days after your last activity, and expired sign-in sessions are deleted automatically. Invoices are kept even after account deletion, in line with the legal obligation to retain accounting records (10 years, Article L123-22 of the French Commercial Code).
Your rights
Under GDPR, you have the right to access, rectify, erase, and port your data, as well as a right to object. To exercise any of these rights, write to relistocompany@gmail.com — we respond within a reasonable timeframe.
Contact
For any question about this policy: relistocompany@gmail.com.