BackToFirst
EN
Try it free

Privacy policy

Last updated: 4 novembre 2026

1. Data controller

[Ced System], [Via del Progresso 13 , 63821 Porto Sant Elpidio (Provincia)], VAT no. [SNGLNZ88L20D542Z], email info@backtofirst.it.

2. What data we process

When you subscribe

  • The email and name you enter at checkout.
  • Subscription data: plan, dates, status, licence key.
  • Billing data required by law.
  • Payment data (card, PayPal account) is processed directly by Stripe and PayPal: we do not see or store it.

When you use the extension

  • Vinted listings, chats, offers and notifications are read and stored only in your browser. We do not receive or store them on our servers.
  • Licence check: the extension periodically sends the licence key to our servers to check that the subscription is active. We record the date, time and IP address of the request.
  • Devices: to apply the maximum number of devices per licence, the extension creates a random identifier on first install and sends it together with the browser name, operating system and extension version. We do not collect device fingerprints or any other data from your computer. We store only a hashed version of the identifier; you can see and disconnect devices from your account.
  • AI feature (only if you use it): the title, description, brand, size, condition and price of the listing, together with suggested prices for similar items, are sent to our server and from there to the AI provider to generate the suggestion. We do not send your name, email or your buyers' data. We do not store the texts: we only record how many requests you make each month, for the plan limit.

If you write a review

  • Rating, title, text and the name you choose to display, with the language and the plan of your licence. We publish them on the Reviews page only with your explicit consent and after a check; your email is never shown. You can edit or delete your review at any time from your account.
  • Once only, a few days after your licence starts, we may email you to ask for your opinion.

When you log in to your account

  • To log in we send you a link by email, valid for 30 minutes and usable once. We record the date and IP address of the request.
  • While you are logged in, the site uses a technical session cookie, needed to keep you logged in. It is deleted when you close the browser.
  • From your account you can download your data and delete your account.

When you visit the website

  • Technical browsing data (IP address, browser, pages visited) in the server logs, for security.
  • The site uses no profiling cookies, third-party analytics or advertising. Fonts are hosted on our own server.

3. Why we process it and on what basis

  • Providing the service, managing the subscription and support: performance of the contract (Art. 6(1)(b) GDPR).
  • Invoicing and tax obligations: legal obligation (Art. 6(1)(c) GDPR).
  • Security, abuse prevention (for example repeated free trials) and legal defence: legitimate interest (Art. 6(1)(f) GDPR).
  • Service communications (renewals, price changes, important updates): performance of the contract. We do not send newsletters without your consent.

4. Who we share it with

Only with the providers we need to deliver the service, appointed as data processors:

  • Stripe Payments Europe Ltd. and PayPal (Europe) S.à r.l. et Cie, S.C.A., for payments;
  • [IONOS], for hosting the website and servers;
  • Anthropic, for the AI feature;
  • Aruba S.p.A., for sending emails;
  • our accountant, for tax obligations.

Some providers may process data in the United States. In those cases the transfer is based on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

5. How long we keep it

  • Subscription data: for the whole subscription and up to 24 months after it ends, unless there is a dispute.
  • Billing data: 10 years, as required by law.
  • Licence check and server logs: 90 days.
  • Connected devices: as long as the licence exists, or until you disconnect them from your account.
  • Monthly count of AI requests: 12 months.
  • Reviews: until you delete them or ask for your account to be deleted.

6. Your rights

You can ask us at any time to access, correct or delete your data, restrict processing, object to processing based on legitimate interest and receive your data in a readable format (portability). Write to info@backtofirst.it: we reply within 30 days.

You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or with the supervisory authority of your country of residence.

7. Data that stays in your browser

The listing archive, action history, photo safety copies and settings are stored in the extension's local storage on your computer. You can delete them at any time by removing the extension from your browser.