Last updated: 23/05/2026
This privacy policy describes how DealMamba collects, uses, and protects users' personal data, in compliance with Regulation (EU) 2016/679 (GDPR).
The data controller for personal data processing is DealMamba. For any privacy-related requests, you can contact the data protection officer at: privacy@dealmamba.com
| Data | Purpose | Required |
|---|---|---|
| Email address | Registration, login, email notifications | Yes |
| Password (bcrypt hash) | Authentication | Yes |
| Telegram Chat ID | Sending notifications via Telegram | No |
| Alert preferences | Configuration of search criteria and notifications | No |
| Push notification token (FCM) | Delivery of push notifications on the Android app via Firebase Cloud Messaging | Only if you install the Android app |
| Anonymous app crash logs | Stability diagnostics via Firebase Crashlytics (no personal data, no listings content) | Only if you install the Android app |
| Payment data | Managed entirely by Paddle (Merchant of Record) | Only for paid plans |
| Aggregate visit statistics | Page visited, referrer, device type and country, collected anonymously and in aggregate form (see § 7) | On all pages of the website |
We do not use profiling cookies and do not collect users' Vinted credentials. Visit statistics are anonymous and cannot be traced back to an individual.
Personal data may be shared with the following third parties, exclusively for the purposes indicated:
| Recipient | Purpose | Data Shared |
|---|---|---|
| Paddle.com Market Limited | Payment processing and billing (Merchant of Record) | Email, payment data |
| Telegram Bot API | Sending notifications via Telegram | Telegram Chat ID, notification content |
| SMTP Provider (Brevo/other) | Sending notifications via email | Email address, notification content |
| Google (Firebase Cloud Messaging) | Delivery of push notifications on the Android app (app users only) | FCM token, notification payload |
| Google (Firebase Crashlytics) | Stability diagnostics for the Android app (app users only) | Anonymous stack traces, device model, OS version, app version |
We do not sell or share personal data with third parties for marketing purposes. Firebase services (Google LLC) are used exclusively for the technical operation of the Android app (push notification delivery and crash diagnostics). Google acts as a data processor under art. 28 GDPR.
Under the GDPR, you have the right to:
To exercise these rights, write to privacy@dealmamba.com. We will respond within 30 days of receiving your request.
You also have the right to lodge a complaint with the competent supervisory authority (Italian Data Protection Authority — Garante per la protezione dei dati personali).
DealMamba uses only strictly necessary technical cookies for the operation of the service. Specifically:
We do not use profiling cookies or third-party cookies for advertising purposes.
Visit statistics. To understand how the site is used we rely on Umami, a self-hosted analytics tool: it runs on our own servers, sets no cookies, and does not track people over time or across websites. The data collected is aggregated and anonymous (page visited, referring site, device and browser type, country); it is never shared with third parties nor used for advertising. Since no cookies or identifying data are involved, no consent banner is required.
Personal data is retained for the duration of the contractual relationship with the user. Upon account deletion:
We implement appropriate technical and organizational measures to protect personal data, including:
Personal data may be transferred to countries outside the European Economic Area only where adequate protection guarantees are ensured (e.g., Standard Contractual Clauses approved by the European Commission).
For any questions regarding this privacy policy or the processing of personal data:
You can request the complete deletion of your DealMamba account and all associated personal data at any time.
How to request deletion:
Data deleted within 30 days of the request:
Data retained for legal obligations:
Account deletion is free of charge, final and not reversible.