SELLMATE / PRIVACY

How we handle your data

Last updated: 10 October 2026.

Contact

SellMate is run by DevMaks (Maksym Stanowski). For questions, data access or account deletion requests, use the DevMaks contact form.

Account and security

We store your email address, password hash, email verification date and session information. The extension connection code is stored as a hash on our server; the code itself is stored locally by your browser. We limit login and signup attempts. The owner can see account status, registration and login dates, service usage, and can pause access or change limits. Server logs may include your IP address and technical request information.

Photos and drafts

The extension stores your current photos and draft locally in your browser. When you request analysis or a new background, the photo is sent over an encrypted connection to SellMate. Photo analysis uses Google Gemini. Background processing may use BRIA or Gemini, depending on the active configuration. Photos submitted only through the extension are stored temporarily while the request is processed. Photos added through the web panel remain in private account storage. Photos sent from a phone through a QR code go into a short transfer session accessible only to the connected extension. The session expires after 15 minutes; transfer files are deleted when you finish or the session expires. A received copy stays in the extension draft on your computer. Avoid uploading images containing faces, documents or private background details.

Vinted and browser permissions

The extension works on the new listing form at vinted.pl. It fills selected fields only when you click; it does not request your Vinted password or publish your listing. Access to the active tab, scripting, downloads, side panel and local storage supports form filling, photo editing and draft saving. We do not sell data or use it for advertising.

Providers and location

SellMate runs on OVH infrastructure in Canada. Photos may be transferred to Google for analysis and, when background processing is enabled, to BRIA. Resend handles account verification emails once email delivery is configured. These services receive data only to provide the requested feature.

Purpose, retention and choices

Account data enables login and access protection; photos and drafts enable listing preparation. Data remains while an account is active. Following an account deletion request, data is removed or anonymized subject to legal obligations and existing backups. Contact us to request access, correction or deletion. We do not perform advertising profiling.

Visit statistics

When the public website opens, we count pageviews by day, language and referring domain. These aggregate statistics do not store your IP address, a visitor identifier or the full referring URL. A server-side hash of the IP address limits excessive requests. These counts help us assess website traffic; they are not unique visitor counts.

Cookies

The panel uses an essential session cookie for login. Aggregate pageview counting does not use cookies. We do not run advertising trackers.