Legal
Privacy Policy
This Privacy Policy explains what information Depop Bump (operated via resellbump.com, "we", "us") collects when you use our browser extension and website, why, and the choices you have. The short version: we collect as little as possible, and we never see your Depop password.
1. What we collect
| Data | Why we need it | Where it lives |
|---|---|---|
| Email address (license buyers only) | To deliver your license key and send service notices (renewals, important changes) | Payment processor (Paddle) + license database |
| License key & activation records | To verify your subscription and enforce the 3-device limit | License database |
| Anonymous install ID | To remember your trial period and device count. Not linked to your identity | Your browser + license database |
| License verification timestamps | To keep your entitlement token fresh and honor the offline grace period | License database |
| Server request logs (IP, user agent) | Security and abuse prevention on our license API | Short-lived server logs |
2. What we never collect
- Your Depop password or login credentials — the extension runs in your own logged-in browser session; we never ask for or transmit credentials.
- The content of your listings, messages, or your Depop browsing history.
- Data for advertising, profiling, or resale. We do not sell your data. Ever.
3. Data stored on your own device
The extension stores its settings (delays, run limits), trial start date and cached entitlement token locally in your browser via chrome.storage. This data never leaves your device except the anonymous install ID and license key used for verification. Clearing extension storage resets your local settings only.
4. Third-party processors
- Paddle — our Merchant of Record. Handles checkout, card payments, subscription billing, refunds and tax compliance. Paddle is the legal seller of record for subscriptions; see Paddle's own privacy policy for their processing.
- Cloudflare — hosts this website and our license verification API.
- Email delivery provider — used to send you your license key and service notices.
5. Your rights
Wherever you live (including under the EU/UK GDPR and the California CCPA/CPRA), you may request: access to your personal data, correction, deletion, or a portable copy. Email support@resellbump.com from the address tied to your license and we will respond within 30 days. You can also cancel your subscription at any time, after which your license data is deactivated.
6. Retention
License and purchase records are kept for as long as your subscription is active plus any period required for accounting and fraud prevention. Server request logs are deleted on a rolling basis.
7. Children
Depop Bump is not directed at children under 16, and we do not knowingly collect data from them.
8. Changes to this policy
Material changes will be announced on this page (with an updated "Last updated" date) and, for license holders, by email.
9. Contact
Privacy questions or data requests: support@resellbump.com