Privacy Policy

Who we are

Crosslee is operated from Belgium. For any privacy-related question, email contact@crosslee.app.

What we collect

We collect the minimum data needed to run the service. That is: a randomly generated anonymous user token stored in your browser (chrome.storage.local), and — when you use AI category matching — the listing category string and optionally the listing title you are crossposting. We do not collect your Vinted account credentials, your name, your email, or your browsing history.

How we use it

The anonymous token lets us count your monthly free-tier usage. The category string is sent to our backend and forwarded to OpenAI for category matching. The result is cached so the same category is not re-queried on every crosspost.

Third parties

We share the category string (and optional title) with OpenAI to compute the category match. We use ExtensionPay (backed by Stripe) to process subscription payments. Payment details are entered directly into Stripe — we never see your card number.

Where data is stored

Anonymous usage counts and category-match caches live in a PostgreSQL database hosted on Railway (EU region). Payment data is held by Stripe under their own privacy policy.

Your rights under the GDPR

Under the GDPR you have the right to access, correct, or delete any personal data we hold about you, and to withdraw consent at any time. To exercise these rights, email contact@crosslee.app. Because we store no personal identifiers beyond the anonymous token, deletion is typically a matter of clearing your extension storage on your own device.

Cookies and tracking

crosslee.app uses no tracking cookies. The extension uses chrome.storage.local to remember the listing currently being crossposted and your anonymous user token — nothing leaves your device without an explicit action.

Changes to this policy

We will update this policy when the service changes. The date at the top reflects the latest version.