Dracily

Privacy

This page describes what dracily.com stores when you use Dracily, the Chrome extension, and the admin panel.

Who operates the site

Dracily is operated at dracily.com. Privacy questions go to the platform owner at genniplars@icloud.com.

Account and workspace data

When you register, Dracily stores your name, email address and a hash of your password. The workspace stores company details you enter, Vinted usernames that the extension reports, listings, orders, buyers, messages, labels and automation settings. The extension uses the Vinted session already open in your browser. Dracily does not ask for your Vinted password.

Cookies and sessions

A sign-in sets an httpOnly cookie named dracily so you stay logged in. During maintenance, a separate httpOnly cookie named dracily_gate remembers the maintenance password for 8 hours. After that, the password is required again. These cookies are not used for advertising.

IP addresses and audit logs

Sign-in attempts store the IP address, browser user agent, email address and whether the attempt succeeded. Changes made in the admin panel are stored with the actor, the action and the IP address. This is for security and support.

Admin access

admin.dracily.com is limited to the platform owner. Other accounts can be given a workspace role. Those roles change what that person can open inside their own Dracily workspace. They do not open the admin panel.

Payments

Paid plans are billed by Stripe. Dracily stores the plan name and Stripe customer and subscription identifiers. Card numbers stay with Stripe.

What we do not do

Dracily does not sell personal data. Google Analytics is not connected.

Retention and your choices

Workspace data stays while the account exists. You can ask for a copy, a correction or deletion of your account by emailing genniplars@icloud.com. Security logs are kept so abuse can be investigated.