Privacy Policy
This policy explains how Vinted Tracker ("the app") accesses, uses, stores, shares and deletes data, including data received from Google APIs. Vinted Tracker is a private, non-commercial desktop tool. It runs only on its developer's own Mac and is used only with the developer's own Gmail accounts. It is not offered to the public and is not affiliated with Vinted or Google.
1. Google permissions the app requests
| Permission (scope) | Why |
|---|---|
https://www.googleapis.com/auth/gmail.readonlyRequired |
To find and read Vinted notification emails so sales can be recognised. Read-only: the app cannot send, delete, label or change emails or settings. |
openid and https://www.googleapis.com/auth/userinfo.profileOptional |
Only if the user chooses to show the Google account's profile picture in the local dashboard. Without this, the app asks for Gmail read-only access only. |
The app never sees or stores the Google account password. Sign-in takes place on Google's own pages in the browser.
2. What the app reads
- Vinted emails only. Synchronisation searches Gmail for messages from Vinted sender domains. Each matching message is read (headers such as sender, subject and date, and the message text) so the app can recognise sales, cancellations, payouts and fees using fixed rules.
- Gmail address of the account. Read at sign-in, at each synchronisation and when the connection is checked, to confirm that the right account is connected and to prevent the same account from being connected twice.
- Profile picture (optional). If enabled, the picture is downloaded from Google's image servers. The name returned by Google is not stored.
- Diagnostics run by the user. The user can manually run local diagnostic commands that list or display masked excerpts of selected messages in the computer's terminal. Their output is not stored by the app.
3. What the app stores, and where
Everything is stored locally on the user's own computer. Nothing is uploaded to any server operated by the developer or by third parties.
| Data | Location |
|---|---|
| Sales extracted from Vinted emails: transaction ID, item name, sale date, item price, postage, amount transferred to the Vinted balance, currency and status. Also payouts and fees (amount, currency, date). | Local SQLite database, readable only by the user's macOS account |
| Per processed email: Gmail message ID, email date, email type, processing status and a short reason if manual review is needed. For "order completed" emails also the masked Vinted seller username and a hash of it, used to check that the email belongs to the right account. Email text is not stored. | Same local database |
Per connected account: a masked Gmail address (for example a***z@example.com) and a SHA-256 hash of
it, the masked Vinted username and its hash, connection status and time of last synchronisation. |
Same local database |
| OAuth access and refresh tokens | macOS Keychain only. Never written to the database, files, Git or logs. |
| Profile picture (optional): the image file only, maximum 200 kB | Local folder next to the database, readable only by the user |
| Automatic database backups made before database upgrades or rebuilds | Local backup folder, readable only by the user |
Not stored: email bodies, attachments, buyers' names, usernames or addresses, and the full Gmail address in plain text.
4. How the data is used
Data is used only to provide the app's own features to its user: recognising Vinted sales and showing revenue, sales and
items that need manual review in a dashboard on the same computer. The dashboard opens the database read-only and is bound to
127.0.0.1.
- No advertising, profiling, retargeting or interest-based ads.
- No analytics or tracking. The dashboard's framework telemetry is disabled.
- Google user data is not used to develop, improve or train generalised or non-personalised AI or machine-learning models.
- Google user data is not used to determine credit-worthiness or for lending purposes.
- No one other than the user reads the data.
5. Sharing and transfers
The app does not sell, rent, share or transfer Google user data to anyone. It has no backend server. The only network
connections it makes are to Google: to sign in, refresh and revoke access (accounts.google.com,
oauth2.googleapis.com), to read Gmail through the Gmail API (gmail.googleapis.com) and, if the
profile picture is enabled, to fetch it (openidconnect.googleapis.com, *.googleusercontent.com).
6. Security
- Tokens are kept in the macOS Keychain.
- The database, backups and profile pictures are stored with permissions that only the user's macOS account can read.
- Email addresses and Vinted usernames are stored only masked and as hashes.
- Communication with Google uses HTTPS. Sign-in uses Google's OAuth 2.0 flow for desktop apps with a loopback redirect.
7. Retention and deletion
Data is kept on the user's computer until the user deletes it. The user can at any time:
- Disconnect an account with the app's command
python -m connector.konto fjern konto-N. This revokes the token at Google, deletes it from the Keychain, deletes the account's profile picture and deactivates the account. Previously extracted sales remain in the local database until deleted. - Revoke access from Google at myaccount.google.com/permissions (select Vinted Tracker and remove access).
- Delete all data by deleting the app's local data folder (database, backups and profile pictures) and
removing the app's entries (service
dk.vinted-tracker.gmail) from the macOS Keychain.
Google may also end access on its own, for example when access is revoked, when a token has not been used for six months or when the account password is changed.
8. Changes to this policy
If the way the app handles data changes, this page will be updated before the change takes effect, and the date above will be changed.
9. Contact
Questions about this policy can be sent to the user support email shown on Google's consent screen for Vinted Tracker, or raised as an issue in the public repository for this website.
Privatlivspolitik (dansk)
Vinted Tracker er et privat, ikke-kommercielt skrivebordsværktøj, der kun kører på udviklerens egen Mac og kun bruges med udviklerens egne Gmail-konti. Det er ikke tilknyttet Vinted eller Google.
Tilladelser
gmail.readonly(påkrævet): læse Vinted-mails. Kan ikke sende, slette eller ændre mails.openidoguserinfo.profile(valgfrit): kun til kontoens profilbillede i det lokale dashboard.
Hvad læses
Kun mails fra Vinteds afsenderdomæner, for at genkende salg, annulleringer, udbetalinger og gebyrer. Kontoens Gmail-adresse læses ved login, synkronisering og statustjek for at bekræfte, at det er den rigtige konto.
Hvad gemmes, og hvor
- Kun lokalt på computeren: salg (transaktions-ID, varenavn, dato, beløb, valuta, status), udbetalinger og gebyrer, Gmail-meddelelses-ID'er og mailtype, maskeret Gmail-adresse og Vinted-brugernavn samt hashes af dem.
- Tokens ligger kun i macOS-nøgleringen. Profilbilledet (valgfrit) gemmes som en lokal billedfil.
- Gemmes ikke: mailtekst, vedhæftninger, køberes navne, brugernavne eller adresser og den fulde Gmail-adresse i klartekst.
Brug og deling
Data bruges kun til værktøjets egne funktioner på samme computer. Ingen reklame, analyse, sporing eller AI-træning. Data sælges, deles eller overføres aldrig. Værktøjet har ingen server og forbinder kun til Google.
Sletning
- Fjern en konto med
python -m connector.konto fjern konto-N. Det tilbagekalder adgangen hos Google, sletter tokenet og profilbilledet. Tidligere salg bliver i den lokale database, indtil de slettes. - Tilbagekald adgangen på myaccount.google.com/permissions.
- Slet alt ved at slette værktøjets lokale datamappe og nøgleringselementerne (tjenesten
dk.vinted-tracker.gmail).
Kontakt
Via supportadressen på Googles samtykkeskærm for Vinted Tracker eller som et issue i hjemmesidens offentlige repository.