Privacy policy
Last revised : 2026-08-27
In one paragraph
The TrustScan extension transmits nothing. It reads the listing page you are viewing, computes a score inside your browser, and stops there. It makes no network request at all, not even to the two sites it reads.
This document describes the whole picture anyway: the extension, this website, and the purchase of a licence.
The extension
The permissions it asks for
The extension declares two host permissions, www.leboncoin.fr and www.vinted.fr, without which it could not read the page you are viewing. It declares no other: no tab access, no access to other sites, no network permission. Any request to a third-party server would be blocked by Chrome, and the extension makes none at all, not even to the two sites it reads.
What it reads
When you open a listing or a seller profile on Leboncoin or Vinted, the extension reads the content of that page: the description, the number of photographs, the information the site displays about the seller. This reading happens in your browser’s memory, to compute the score.
What it keeps
Everything is stored by the browser on your machine, in the extension’s local storage. None of it leaves.
| Data | Content | Retention |
|---|---|---|
| Settings | Your display preferences | Until you uninstall |
| Licence | Your key, if you have bought one | Until you uninstall |
| History | The last fifty scans: page address and score, nothing else | Until you uninstall |
| Calibration | Diagnostic records, only if you turn on diagnostic mode yourself | Until you uninstall |
Removing the extension removes all of it.
The report link
The panel offers a link to report a listing to us. It sends nothing: it opens your mail client with a message already written, addressed to our contact address, containing the address of the page concerned, the score computed and the list of signals triggered.
You read that message, edit it if you wish, and send it yourself. Until you press send, nothing leaves. This is the only case where data can leave your machine because of the extension, and it rests entirely with you.
Licence verification
Your licence is a signed token. The extension checks that signature locally, using a public key contained in its own code. Activating a licence, and using it afterwards, involves no network request.
This website
There is no analytics tool, no advertising tag, no third-party script and no font loaded from an external service. The site sets no cookie, which is why you have never been asked to accept one: there is nothing to consent to.
The site is served by Cloudflare, which keeps short-lived technical logs (IP address, requested page, timestamp) for security and abuse prevention. We do not use them to build any profile, and we do not cross-reference them with anything else.
The launch notification list
While the paid features are unavailable, the pricing page offers to tell you when they ship.
If you submit that form, we keep your e-mail address, the date you signed up and the language of the page. The legal basis is your consent (GDPR, Article 6(1)(a)). The address is used for a single message, on launch day, and is shared with nobody. To be taken off the list before then, write to the address at the bottom of this page: removal is immediate.
Buying a licence
Buying is the only other moment where personal data is involved.
Who does what.
| Party | Role | What it handles |
|---|---|---|
| Lemon Squeezy, LLC | Reseller of record, it is the seller | Payment, invoice, VAT, your billing details |
| Cloudflare, Inc. | Hosting and storage | This site, and the store holding issued licences |
| Resend (Plus Five Five, Inc.) | E-mail delivery | Sending your licence to you |
We never see your card details: they are handled by Lemon Squeezy and never reach us.
What we store. Your e-mail address, in lower case, and the licence issued against it: its plan, its date, its identifier. That is the entire record. No password, no account, no purchase history, no browsing data.
Why. To deliver the licence you paid for, and to be able to send it to you again if you lose it. Under the GDPR, the legal basis is the performance of our contract with you (Article 6(1)(b)).
For how long. For as long as the licence is valid, unless you ask us to delete it.
Your rights
You may ask for access to your data, its correction, its deletion, or a copy of it, by writing to the address at the bottom of this page. Deleting your record means losing the ability to have your licence re-sent; the licence already in your possession keeps working, since it is verified offline.
The data the extension stores on your machine is not accessible to us: you delete it yourself by uninstalling the extension, without having to ask.
You may also lodge a complaint with your supervisory authority. In France, that is the CNIL.
Changes
This page is the reference version of our privacy policy. Any change is published here, and the revision date at the top is updated with it.
Write to us : osmos64.pro@gmail.com
No cookies, no analytics, no third-party script. Nothing to consent to.