Privacy Policy
Last updated: 2 March 2026
Elsewhere (“the Extension”, “we”, “us”, or “our”) is a Chrome browser extension that automatically finds secondhand alternatives on Vinted when you browse supported fashion retail websites. This Privacy Policy explains what data we collect, how we use it, and your rights as a user.
Chrome Web Store compliance: The use and transfer to any other app of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
1. Data We Collect
1.1 Product Information
When you visit a supported retailer’s product page, the Extension automatically reads publicly-visible product data displayed on that page and transmits a subset of it to our servers.
Data transmitted to our servers:
- Product title – the name of the item you are viewing
- Price and currency – the listed retail price
- Product images – URLs of product images shown on the page
- Brand name – the brand or designer of the product
- Page URL – the URL of the product page you are viewing
- Retailer hostname – the domain of the retailer
(e.g.
www.endclothing.com)
Data read locally but not transmitted:
The Extension also reads the following fields from the page to assist with extraction accuracy. These fields are processed entirely within your browser and are not sent to our servers:
- Product availability – stock status (e.g. in stock, out of stock)
- Product SKU / identifiers – internal retailer identifiers where available
- Colour / variant – the selected product variant where available
We do not track your global browsing history. The page URLs we collect are limited strictly to product pages on supported retail websites and are used solely to find secondhand matches. This data does not include your name, email address, payment details, or any other personally identifiable information.
1.2 Instance Identifier
When you first use the Extension, a single random unique
identifier (UUID) is generated and stored in your
browser’s local extension storage
(chrome.storage.local). This ID:
- Is randomly generated and contains no personal information
- Is used to associate activity across sessions for analytics, de-duplication, and API-key registration
- Is not linked to your Google account, name, email, or any other identifying information
- Persists until you uninstall the Extension or clear browser extension storage
1.3 Usage Analytics
The Extension sends anonymous usage events to PostHog (our analytics provider) to help us understand how the Extension is used and improve it. The events sent are:
| Event | Data Included |
|---|---|
| Extension installed | Instance ID, version |
| Extension updated | Instance ID, prev/new version |
| Product extracted | Instance ID, URL, candidate count, price, currency |
| Extraction failed | Instance ID, failure reason |
| Unsupported site | Instance ID, retailer hostname |
No event includes your name, email address, global browsing history, or any other personally identifiable information.
2. How We Use Your Data
We use collected data exclusively to:
- Provide the core service – Product data is sent to our servers to search Vinted for secondhand matches, which are then displayed in the Extension popup.
- Improve the Extension – Anonymous analytics help us understand which sites perform well, diagnose failures, and prioritise improvements.
- Improve match quality – Product data sent to our servers may be retained to train and evaluate machine-learning models for product matching. Before any data is used for this purpose, the Instance ID is stripped so that the retained data cannot be linked back to any installation or individual.
- Maintain service reliability – The Instance ID allows us to detect and investigate errors without identifying individuals.
We do not:
- Sell your data to third parties
- Use your data for advertising or marketing
- Share data with retailers or any party other than our analytics provider (PostHog)
- Collect or store your personal information
3. Data Sharing
3.1 Elsewhere Backend
Product data extracted from retailer pages is transmitted to our backend servers over an encrypted HTTPS connection. Our servers use this data to search Vinted for matching secondhand listings. Product data may be retained on our servers to improve match quality and train product-matching models. Before being used for machine-learning purposes, the Instance ID is removed so the data is fully anonymous. Transmissions are authenticated with an API key and are not associated with any personal identity.
3.2 PostHog (Analytics)
Anonymous usage events are sent to PostHog, our analytics provider. PostHog processes this data on our behalf under a data processing agreement and stores it on EU-based infrastructure. PostHog’s privacy policy is available at posthog.com/privacy.
We do not share your data with any other third parties.
4. Data Storage
4.1 In Your Browser
The Extension stores the following data locally in
chrome.storage.local:
| Data | Purpose | Retention |
|---|---|---|
| Instance ID (UUID) | Analytics, de-dup, API-key setup | Until uninstall |
| API key | Authenticate requests to our backend | Until uninstall |
| Last extracted data | Display results in popup | Until next extraction |
| Candidate matches | Display results in popup | Until next extraction |
This data is stored encrypted by Chrome and is not accessible to other websites or extensions.
4.2 On Our Servers
Product information (title, price, images, URL, brand, retailer) sent to our backend may be retained for improving product matching and training machine-learning models. Before any data is used for model training, the Instance ID is stripped. The retained data contains no information that could identify a user or installation.
5. Permissions Explained
The Extension requests the following browser permission:
storage— To store your Instance ID, API key, and cached extraction results locally inchrome.storage.local.
The Extension declares host permissions for supported fashion retail domains (currently endclothing.com, mrporter.com, ssense.com, and farfetch.com) as well as our backend server and analytics provider. Host permissions for retail domains allow the Extension to:
- Inject a content script – The product extraction script runs automatically when you navigate to a supported product page, so it can surface matches without you needing to click anything.
- Read data-layer values – On supported pages, the Extension injects a helper script (via the page DOM) to read Google Tag Manager data-layer values for accurate product data extraction. This script is strictly programmed to extract only specific e-commerce product fields (name, price, SKU, brand, variant) and explicitly ignores any user account, identity, or order data.
Host permissions for our backend API server and PostHog (analytics) allow the Extension to transmit product data and anonymous usage events over HTTPS.
The Extension does not access any websites or pages outside of the domains listed above.
6. Data Security
All data transmitted between the Extension and our servers is sent over HTTPS. Your Instance ID is stored locally in Chrome’s encrypted extension storage. We do not transmit or store passwords, payment information, or any sensitive personal data.
7. Children’s Privacy
The Extension is not directed at children under the age of 13. We do not knowingly collect data from children. If you believe a child has used the Extension, please contact us using the details below.
8. Your Rights
Because the Extension does not collect personally identifiable information and uses only an anonymous Instance ID, most data protection rights (such as subject access requests) do not apply in practice. If you wish to reset your Instance ID, you can do so by uninstalling and reinstalling the Extension. If you have any questions about data we hold, please contact us.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this document. Continued use of the Extension after changes are published constitutes acceptance of the updated policy.
10. Contact
If you have questions or concerns about this Privacy Policy or the data practices described here, please contact us:
Email: hello@elswhr.shop
Elsewhere is an independent product and is not affiliated with, endorsed by, or sponsored by any of the retail websites it supports.