Legal
Privacy Policy
Last updated: 2026-10-12
This policy explains what personal data Vendly (vendlydata.com) collects from you, why, and what rights you have over it. It covers our own website and accounts — not the Vinted marketplace, which we analyse but do not operate or control.
1.Who we are
Oleksandr Tkachenko, an individual based in Poland, operates Vendly, a Vinted resale-analytics service at vendlydata.com ("Vendly", "we", "us"). For any privacy question, write to [email protected].
Vendly is an independent analytics tool. It is not affiliated with, endorsed by, or operated by Vinted.
2.What we collect
| Data | Why |
|---|---|
| Email address | Account login, service emails (verification, receipts, important notices) |
| Password | Stored only as a one-way cryptographic hash (bcrypt) — we never see or store it in readable form |
| Account tier (Free / Pro) and daily usage counters | Enforcing the Free-tier daily limits described in our Terms of Service |
| Session cookie | Keeping you signed in (see "Cookies" below) |
| IP address (briefly, in request logs) | Rate-limiting and abuse prevention; not linked to your account for any other purpose |
| Billing information | Handled entirely by our payment processor — see §6. We never receive or store your card details. |
We do not collect your name, address, phone number, or any data beyond what the table above lists, unless you send it to us directly (e.g. in a support email).
3.Cookies and local storage
Vendly uses exactly two browser-storage mechanisms, both strictly functional:
- Session cookie — proves you're logged in. Set as HttpOnly and Secure, so it can't be read by scripts or sent over an unencrypted connection.
- Language preference — saved in your browser's local storage so the site opens in the language you last picked. Never sent to our servers.
We do not use advertising cookies, analytics trackers, or any third-party tracking scripts. There is nothing on Vendly that profiles you for advertising.
4.Legal basis for processing (GDPR)
- Contract — account data is processed to provide the service you signed up for (Art. 6(1)(b) GDPR).
- Legitimate interest — IP-based rate limiting, to keep the service available and prevent abuse (Art. 6(1)(f)).
- Legal obligation — where we must keep billing records for tax purposes (Art. 6(1)(c)).
5.Who we share data with
We use a small number of service providers to run Vendly. Each only receives the minimum data it needs to do its job:
| Provider | Purpose | Data involved |
|---|---|---|
| Resend | Sending account emails (verification, notices) | Email address |
| Creem | Payment processing for Pro subscriptions (merchant of record) | Email, billing details — handled entirely on their side |
| Cloudflare | Network security, DDoS protection, HTTPS termination | IP address, request metadata |
| Hetzner (EU hosting) | Servers and database, located in the EU | All of the above, at rest |
We do not sell personal data, and we do not share it with anyone for marketing purposes.
6.Payments
Pro subscriptions are billed through Creem, which acts as the merchant of record for your purchase. Your card details go directly to them — Vendly never receives or stores them. Their own privacy policy governs how they handle your payment data.
7.Data retention
We keep your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where we're required to keep billing records for legal/tax reasons (typically up to the statutory period required in Poland).
8.Your rights
If you're in the EU/EEA or UK, under GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request erasure ("right to be forgotten")
- Export your data in a portable format
- Object to or restrict certain processing
- Lodge a complaint with your national data protection authority
To exercise any of these, email [email protected]. We'll respond within 7 days.
9.About the market data we show
Vendly's product shows aggregated, anonymised statistics about items listed and sold on Vinted (prices, sell-through, categories). This data describes the public Vinted marketplace, not Vendly's own users, and individual sellers or buyers are never identified or identifiable in anything we display.
10.International transfers
Our servers are hosted in the EU. Some service providers (such as Cloudflare) operate global networks and may process data outside the EEA under Standard Contractual Clauses or an equivalent safeguard.
11.Children
Vendly is not directed at, and should not be used by, anyone under 18.
12.Changes to this policy
If we make material changes, we'll post the updated date at the top of this page and, for significant changes, notify account holders by email.
13.Contact
Questions about this policy or your data: [email protected]