Privacy Policy

Last updated 2026-09-28

Swanum (“we”) operates Comps. Contact for any privacy question: contact@swanum.com.

What we collect about you

• Account: your email address, plan, and when you signed up. No password.
• API usage: for each request — time, endpoint, the search text, a hash of the parameters, status, latency, whether it was cached. Used for metering, quotas, abuse prevention and improving coverage.
• Web tool without an account: a daily-rotating keyed hash of your IP address to enforce the free lookup limit. We don't store the IP itself.
• Payments: none — Comps is free during the beta and we collect no payment details.
• Analytics: counts of events (searches, sign-ups) without IP addresses. For sign-ups we also keep which website sent you and the first page you opened (see the sc_src cookie below) and, if you tell us, what you'll use Comps for.
• Feedback: if you send us a message from the site, we keep it, the page you sent it from and the email address you give us (if any) so we can reply.

Cookies

First-party cookies only, set by swanum.com/comps and never shared: a session cookie when you're logged in, a security (CSRF) cookie, a short-lived cookie that shows a new API key once (2 minutes) and one that carries your sign-up answers through the email link (1 hour). One cookie is for measurement: sc_src remembers which website sent you and the first page you opened (no identifier, 90 days), so we can tell which channels bring sign-ups. No advertising cookies and no third-party trackers.

Browser extension

The Comps browser extension (“Swanum Comps – Sold Prices for Vinted”) has one purpose: showing what similar items sold for while you view a Vinted listing.

• What it sends: only when you click “Check sold prices” (or, if you saved a Comps key and turned on auto-check, when you open a listing), the listing's title, its brand and the country of the Vinted site you're on, sent over HTTPS to swanum.com. Nothing else: no page address, listing id, seller, price, cookies or browsing history. The listing's price is read only to compare it with the result inside the box and never leaves your browser.
• Your key (optional): if you save your Comps API key, it is stored in the extension's local storage on your device, is never shown to the Vinted page and is sent only to swanum.com to count your monthly checks. You can remove it in the extension's settings or revoke it from your dashboard.
• What we keep: the same as for the API and web tool above — the search text built from the title, the country, time, status and, without a key, a daily-rotating keyed hash of your IP address to enforce the free daily checks. Like every request to swanum.com, a check also appears in our web server's access log (time, IP address, the request address including the title and brand, browser name), kept for up to 90 days for security and abuse prevention, then deleted.
• What it doesn't do: no analytics, no tracking, no ads, no install or uninstall pings, and it doesn't read pages outside the Vinted sites listed in the store. We don't sell or share this data and use it only to provide and improve the lookup.

The extension is an independent tool, not affiliated with, endorsed by or sponsored by Vinted. Vinted is a trademark of its owner.

Marketplace data

We collect item-level facts from public marketplace pages (title, price, currency, condition, size, brand, category, dates, item link and the marketplace's own image link). We do not collect or store seller or buyer names, ids, profile links or any other personal data about marketplace users, and we don't copy images.

Legal bases and retention

Account and usage data: to perform our contract with you (GDPR Art. 6(1)(b)) and our legitimate interest in preventing abuse (6(1)(f)). Kept while your account exists; when you delete it we remove your email and keys, and keep usage logs only in de-identified form.

Processors

Hetzner (hosting, Germany), Cloudflare (network), our email provider (sign-in links).

Your rights

You can access, correct, export or delete your data, object to processing, and complain to your data-protection authority. Email us and we'll respond within 30 days. You can delete your account yourself from the dashboard.