Privacy Policy

Vinteer is operated by Mathys YON, sole proprietor (entrepreneur individuel) under French law, 60 Rue François 1er, 75008 Paris, France ("Vinteer", "we", "us"). You can reach us at contact@vinteer.io.

Vinteer is operated from France. Our processing of personal data is governed by the EU General Data Protection Regulation (GDPR) and French law, including for visitors in the United States. This policy also describes the choices that US privacy laws give you.

Comprehensive privacy laws in a growing number of US states give residents rights over their personal data, but they generally apply only to businesses above certain size or data-volume thresholds. As of the date of this policy, Vinteer is below those thresholds. We nevertheless offer the choices described below to all US visitors.

Vinteer is not open in the US yet. Today, the site collects the following.

When you join the waitlist

• Your email address, which you type in the form.
• The market and the page you signed up from (for example, the US page).
• Your country, which our hosting provider infers from your IP address and passes to us in a request header. We never ask you for it.
• The date of your sign-up.

Your IP address is used briefly in server memory to limit repeated submissions. We do not store it in the waitlist database.

We send you a confirmation email through Brevo, our email provider. We do not pass the email address you enter in the waitlist form to any advertising provider.

When you browse the site

• Audience measurement. We use Vercel Web Analytics, which does not use cookies. It identifies a visitor with a hash built from the request, deleted after 24 hours, and records aggregated data such as the page URL, the referring page, your country or region, operating system, browser and device type.
• No advertising pixels. Pages under vinteer.io/us do not load advertising pixels. See "Advertising pixels" below for what can remain active if you first browsed our French site.
• A marketing attribution cookie. When you arrive from a campaign link or from another website, we store a first-party cookie for 30 days that records where your visit came from.
• Your cookie choice. The preferences widget stores your choice in your browser. It does not send it to us.

See our Cookie Policy for the full list.

We will update this policy before we start collecting account data in the US. We expect to handle, at that point:

• your name and email address, through Google sign-in;
• the sales and purchases Vinteer imports for you from Vinted and eBay (amounts, dates, references, buyer usernames and the delivery details shown on shipping labels);
• payment information, which is handled by Stripe. Vinteer does not see your full card number;
• technical logs needed to keep the service secure.

We will email waitlist members and subscribers about material changes to this policy, and the date at the top of this page will change.

• Waitlist emails (your consent): confirming your spot and telling you when Vinteer opens in the US. You can withdraw your consent at any time by using the unsubscribe link in any email or by writing to us.
• The launch discount (your consent): joining the waitlist with an email address entitles you to the discount described in our Terms of Service, and we use the email address you gave to recognize you at launch.
• Audience measurement and site improvement (our legitimate interest): understanding how the site is used.
• Security and abuse prevention (our legitimate interest): limiting repeated submissions and protecting the site.
• Legal obligations: answering your requests and keeping records the law requires.

We do not sell your personal information for money. We use these providers:

• Supabase: database where the waitlist is stored (European Union, region eu-west-1).
• Vercel: hosting of the site and cookieless audience measurement.
• Brevo: sending the confirmation email and our emails to waitlist members (France, European Union).

Supabase, Vercel and Brevo act on our behalf and only on our instructions. At launch, Stripe (payments) and Google (sign-in) will be added to this list.

We may also disclose information when the law requires it, for example to tax authorities or courts.

Pages under vinteer.io/us do not load advertising pixels, and we do not pass your browsing on these pages to advertising providers.

Our French site, at vinteer.io outside the /us pages, does use advertising pixels. They are covered by the French Privacy Policy. If you first browsed the French site in the same browser tab and then opened a page under /us, the pixels loaded there may still be active in that tab until you reload the page or leave the site.

How to opt out

• Use your browser settings or a content blocker to block third-party scripts and cookies. This stops advertising pixels from running.
• Use the providers' own controls. For Google, see adssettings.google.com. You can also use the industry opt-out tools at optout.aboutads.info. OpenAI offers privacy controls in its own settings and privacy policy.
• Write to contact@vinteer.io and tell us you do not want your data used for advertising measurement. We will handle your request.

Our site does not respond to Do Not Track browser signals, because there is no common standard for them.

We do not currently detect or act on the Global Privacy Control signal automatically. If you use Global Privacy Control, or any other opt-out mechanism, you can still opt out by following the steps in the section above or by writing to us, and we will handle your request manually.

Pages under vinteer.io/us do not load advertising pixels, so no third party collects information about your online activities through them. Pixels from our French site that remain active in the same browser tab are described in the section above.

Your waitlist data is stored in the European Union (Supabase, region eu-west-1), so when you sign up from the United States your data is sent to the EU. Our confirmation emails are sent through Brevo (France, European Union). Vercel Inc., a company based in the United States, hosts the site and provides Vercel Web Analytics.

• Waitlist data: until you unsubscribe or ask us to delete it, and in any case no longer than 12 months after Vinteer opens in the US.
• Technical and security logs: up to 12 months, unless a security incident requires keeping them longer.
• Marketing attribution cookie: 30 days.
• Cookie choice: stored in your browser until you clear it.
• Audience measurement: the visitor hash is deleted after 24 hours.
• After launch, for customers: account and operational data for as long as you have an account, then 3 years to defend our legal rights; invoices and accounting records for 10 years, as French law requires.

We use technical and organizational measures suited to the risks, including encryption of communications in transit (HTTPS/TLS), access limited to people who need it, and confidentiality commitments from our providers. No system is perfectly secure. If a data breach affects you, we will notify you as the law requires.

Vinteer is not directed to children under 13 and we do not knowingly collect personal information from children under 13. The service is for adults 18 and older. If you believe a child has given us personal information, write to contact@vinteer.io and we will delete it.

We send you a confirmation when you join the waitlist and, if you joined, emails about Vinteer's US launch. Every marketing email contains an unsubscribe link and our postal address (60 Rue François 1er, 75008 Paris, France), and we process opt-outs within 10 business days (usually immediately).

You have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format and, where we rely on your consent, withdraw that consent at any time. You can also give instructions about what happens to your data after your death.

If you live in a US state with a privacy law, we will also honor your requests to know what personal information we hold about you, to delete or correct it, and to opt out of sharing for advertising. We do not treat you differently for making a request.

To make a request, write to contact@vinteer.io. You do not need to create an account. We may ask you to confirm your identity to protect your data. We answer within one month, and we can extend that period by two further months for complex requests, in line with the GDPR.

If you believe your rights are not respected, you can lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with your own data protection authority or state attorney general.

When we change this policy, we update the date at the top of this page. For material changes, we also email waitlist members and subscribers.

Email: contact@vinteer.io

Post: Mathys YON, 60 Rue François 1er, 75008 Paris, France