Privacy policy

Effective date: October 19, 2026.

In short: your items, amounts, settings and shipping labels stay in your browser. We never see them. If you use Pro, the extension sends only your licence key to our server to check that it is active. Purchases are handled by Dodo Payments as the seller (merchant of record). This website sets no cookies and runs no analytics.

Who operates Thriftkeep

Thriftkeep is operated by Approtic Solutions Private Limited, Hyderabad, Telangana, India (“we”, “us”). Thriftkeep is the US edition of our Schatulle Chrome extension. Privacy questions and requests: support@schatulle.app.

Your records stay on your device

Everything you enter in the extension — item records (title, platform, purchase and sale dates, purchase price, sale price, shipping and fees), your settings (state, default platform, display options) and, if you use Pro, your licence key and its last check result — is stored only in your browser’s local extension storage (chrome.storage.local). None of it is transmitted to us or to anyone else. We have no access to it and cannot view, recover or restore it.

Shipping-label PDFs you open in the label cropper are processed in your browser’s memory and are never uploaded. The cropped 4 × 6 PDF is saved by you to your device. CSV imports, CSV exports and JSON backups are also created and read locally; the JSON backup does not contain your licence key.

If you remove the extension or clear your browser data, locally stored records may be lost. Make a backup first if you want to keep them. Because we never process these records, they are handled entirely on your device under your control.

Licence check for Pro

Only if you enter a Pro licence key does the extension send that key to our licence server at api.schatulle.app. The check happens when you enter the key and afterwards at most once a day. Only the licence key is transmitted; the response says only whether the key is active or not.

As with any internet request, the server receives your IP address and ordinary connection data. The IP address is used solely to limit the number of check requests per minute (abuse protection) and is held in memory for that purpose; it is not written to our database. Licence keys appear in server logs only truncated to their last four characters. We do not keep our own logs containing IP addresses; Cloudflare, which runs the server, processes them technically to deliver the service and protect it against attacks and may hold them in its platform logs.

To validate a key, our server asks Dodo Payments whether the key is valid and compares the result with our licence database (see the next section).

Purchases through Dodo Payments

Thriftkeep Pro is sold by Dodo Payments as the merchant of record. Dodo runs the checkout, processes your payment and billing details, calculates and collects sales tax, emails you the licence key and manages the subscription. Dodo Payments is responsible for that processing under its own privacy policy. We never receive card or bank account numbers.

Dodo Payments sends us signed notifications (webhooks) with the following data, which we store in our licence database:

• the licence key and its identifier at Dodo,
• the buyer’s email address,
• the subscription identifier, its status (for example active, cancelled, payment past due) and the end of the paid period,
• event timestamps and the identifiers of notifications we have already processed.

We use this data to activate or end Pro and to answer support requests about your purchase. We do not use it for marketing.

This website

This website sets no cookies, uses no analytics or tracking tools and loads no fonts, scripts or content from third parties. It is hosted on Cloudflare, Inc. (USA), which processes the technical access data needed to deliver the pages and keep them secure (IP address, date and time, page requested, browser identifier). We do not keep server logs containing IP addresses.

Links to the Chrome Web Store lead to Google; Google’s privacy policy applies there, including when you install the extension. The “Get Pro” buttons lead to a checkout page run by Dodo Payments, where its privacy policy applies. If you email us, we process your message and contact details to reply to you.

What we do not collect

• No item records, amounts, platform data, purchase or sale data from the extension
• No login details or contents of your Vinted, Poshmark, Depop, eBay, Mercari, Whatnot or other marketplace accounts — Thriftkeep does not access those sites
• No browsing history and no content of other websites (the extension has no host permissions)
• No usage statistics, telemetry, advertising or tracking identifiers
• No account, no password
• No payment data (processed only by Dodo Payments)

Service providers and where data is processed

Cloudflare, Inc. (USA) runs our licence server and licence database (Cloudflare Workers and D1) and hosts this website, under its data processing terms. Dodo Payments processes purchase and payment data as the seller, as described above. We are based in India, so the licence data described above is processed in the United States (Cloudflare) and may be accessed from India by us.

How long we keep data

We keep licence records for as long as the subscription exists and afterwards only as long as legal retention duties or open support questions require. We delete licence records on request and in any case no later than 12 months after the subscription ends. Data in the extension stays on your device until you delete it.

Your privacy rights, including California and other US states

We hold no personal records about you unless you buy Pro; then we hold only the licence key, the email address and subscription details that Dodo Payments shares with us for your subscription. We do not sell or share personal information, do not use it for targeted advertising or profiling, and do not collect sensitive personal information. Whether or not a state privacy law such as the California Consumer Privacy Act applies to us, we honor requests to know what we hold about you, to correct it and to delete it: email support@schatulle.app from the address you used at purchase, or include your order number, so we can match the request. We reply within 45 days and never treat you differently for exercising these rights. For data that Dodo Payments holds as the seller (payment and billing details), please contact Dodo Payments directly. Records stored only in your browser are not held by us; you can export or delete them yourself at any time.

Children

Thriftkeep is intended for adults. We do not knowingly collect personal information from anyone under 18; if you believe we have, email us and we will delete it.

Changes

We update this policy when the extension, the website or the law changes. The version published here applies; we show the effective date at the top and announce material changes on this page.