1. Who we are
FlashV is a service operated by Mohamed Bouloudnine, a sole proprietor (« auto-entrepreneur ») based in France (registered under SIRET 948 251 350 00013).
Contact: hello@flash-v.com
FlashV is an independent product and is not affiliated with, endorsed by, or sponsored by Vinted UAB.
2. Scope
This policy describes FlashV H24 at app.flash-v.com and the FlashWatcher 3.x companion extension. Monitoring runs on our servers even with your browser closed. We do not purchase items on your behalf. FlashV is independent of Vinted.
3. Data and purposes
- Account: email address, account identifier, email verification and sessions, for access and account security.
- Searches: names, keywords, price ranges, categories, conditions, sizes, colours, exclusions and activation state, for matching listings.
- Alerts: public listing identifiers and details (title, price, condition, photo or link when available), detection dates, delivery status and deduplication receipts, to display and deliver results without repetition.
- Optional channels: Telegram user and chat identifiers, bot name, identifier and personal bot key; Discord server and channel identifiers and webhook destination. Destination secrets are encrypted on the server.
- Extension: local connection token, session identifier and expiry or revocation dates, to connect this browser to your account.
- Operations: activity dates, error states, quota counters and technical request data (including IP address and user agent handled by hosting providers), for operation and security.
Account and search processing provides the service you request (contract performance). Abuse controls, quotas and diagnostics protect service availability (legitimate interest). Connecting Telegram or Discord is optional; results are also available in your account.
We do not request your Vinted password or session cookies. Version 3.x does not read your browsing history or Vinted pages. We do not sell your data or use it for targeted advertising.
Paid plans: we process your email address, Stripe customer and subscription identifiers, selected plan, payment status and billing dates to provide and manage your subscription. Stripe collects payment details directly; FlashV does not store full card numbers or card security codes. Billing records needed for accounting or legal obligations may be retained after an account deletion request.
4. Providers and recipients
- Cloudflare: application, collection, database and alert processing.
- Supabase: authentication, email verification and sessions.
- Resend: delivery of login emails.
- Stripe: secure payments, invoices and subscription management. Stripe privacy policy.
- Vercel: marketing website hosting.
- Telegram or Discord: connection and delivery to your chosen channel, under their own policies. Members of a Discord channel can read messages sent there.
Providers may process data in multiple countries. Their policies and safeguards are available from Cloudflare, Supabase, Resend, Vercel, Telegram and Discord. The operator accesses data where necessary for support and operations.
5. Retention and deletion
Searches are kept while you use or retain them in your account. You can delete them from your account. Extension sessions expire after 30 days and can be revoked earlier.
Current beta status: automatic history purging is not enabled. Alerts, deduplication receipts and diagnostic records may therefore remain stored beyond what is shown in the interface. The final retention schedule still needs to be defined and enforced; no automatic purge period is represented as already effective.
Settings → My data provides a data export and an account deletion request. Requesting deletion stops searches and notifications; the team must then complete deletion of the authentication account and server data. A message already being sent may still arrive. Messages delivered to Telegram or Discord are not removed by this request.
6. Your rights
Subject to applicable conditions, you may request access, correction, erasure, restriction or portability of your data, or object to certain processing. Contact hello@flash-v.com. Additional identity checks are requested only when necessary. You may also complain to the CNIL.
7. Local storage and permissions
The web application stores your login session and renewal information in your browser. The extension uses the storage permission and network access to https://app.flash-v.com/* only. It does not request Vinted cookies, nativeMessaging or access to every site you visit. Signing out removes the local token. Uninstalling the extension does not delete your server account.
See storage and cookies. The website can load fonts and images from external services, which receive the technical data necessary for those requests.
8. Updates
This page describes the current H24 architecture. The update date appears above. Changes to processing will be reflected here.