Help Get started What Flogit reads, and what it never touches
What Flogit reads, and what it never touches
It reads what Vinted already shows you, in your own browser. It never sees your password and your numbers never leave the machine.
Your listings, your orders, your offers and your messages, read from Vinted's own pages using the session you are already signed in with.
Never your password, never your login cookie, and never anything from outside Vinted.
What it reads
- Active listings: title, price, size, brand, condition, views, favourites, date listed.
- Completed orders, which is what makes the sales figures real rather than inferred from a listing that vanished.
- Offers and conversations, when you open those screens.
All of it is already on your screen when you use Vinted. Flogit is reading the same pages you are, and nothing is scraped from anyone else's account.
What it never touches
| Thing | Why not |
|---|---|
| Your Vinted password | It never sees a login form. There is no code path in which it could. |
| Your login cookie | Your browser attaches it to requests going to Vinted. Flogit's own requests to its backend deliberately send no cookies at all. |
| Other tabs, history, other cookies | Not granted. It asks Chrome for storage and the Vinted domains, and nothing else. |
The short list of what leaves
Three things, and each only when you press the button that needs it: the text of a listing you asked it to write, a market search phrase, and item photos if you use photo autofill or phone upload.
Your inventory, sales, costs, margins, offers and evidence stay in your browser. They are not on our servers, which is why the free plan can read all of them and why there is nothing for us to lose.
We have no email and no name for you. If you are on a paid plan we hold a one-way hash of the licence key; if you are not, a random identifier generated on your own device. We could not contact you if we wanted to.
Related
Did this answer it?
If not, say so on the board and the article gets fixed.