1. What cookies are
A cookie is a small file a website stores in your browser. It is used, for example, to remember that you have already signed in or to keep the language you chose.
Alongside cookies, a site can store data in the browser's local storage (localStorage). Although not cookies in the technical sense, the same information duties apply, so they are described on this page.
2. Cookies we use
All the cookies we use are technical or strictly necessary: without them the site cannot work properly. We use no analytics, advertising or profiling cookies.
| Name | Owner | Purpose | Duration | Type |
|---|---|---|---|---|
NEXT_LOCALE | Visted | Remembers the site language (Spanish or English) when the browser already sends it. If absent, the language is inferred from the Accept-Language header. | Up to 1 year, if the browser keeps it | Technical |
oauth_state | Visted (API) | Protects against request forgery while you sign in with Google. Only created during that process. | 10 minutes | Technical |
referral_code | Visted (web and API) | Keeps the invitation code when you arrive through a link containing ?ref=, so the sign-up can be attributed to the person who invited you. Written by the affiliate programme page and by the Google flow. Only exists if you arrive with that parameter. | 30 days on the website; 10 minutes in the Google flow | Technical |
[DOMINIO DE LAS COOKIES Y DURACIONES]
3. Local storage
In addition to the cookies above, the site stores two values in your browser's local storage:
visted_token— the session token that identifies you to the API. Without it you cannot access your account.visted_email— your email address, so it can be shown in the interface.
Both are removed when you sign out. They are not shared with third parties or used for advertising.
If you arrive through an invitation link, visted_ref_tracked is also stored in the browser's session storage so the same visit is not counted twice. It is cleared when you close the tab.
4. Third-party cookies
The Visted public site includes no third-party cookies. There is no Google Analytics, no social media pixels and no session-recording tools.
There are two exceptions, neither of which is a cookie of our own site:
- If you choose to pay, checkout opens on Stripe. Stripe may use its own cookies on its domain, in accordance with its cookie policy.
- If you choose to sign in with Google, the flow passes through Google's domain, which may use its own cookies.
- When you register or sign in, the Cloudflare Turnstile widget is loaded from Cloudflare's domain, which may use its own cookies to tell people apart from bots.
The Visted Chrome extension reads Vinted session cookies in your browser to connect your account. Those cookies belong to Vinted and are used for nothing else: the extension only sends them to Visted so they can be encrypted and your session kept in sync.
5. Consent
Because we only use technical cookies necessary for the site to work, we do not show a consent banner. The law does not require one for this type of cookie.
If we add analytics or advertising cookies in the future, we will implement a prior, granular and revocable consent mechanism, and update this page before enabling them.
6. How to control them
You can delete or block cookies from your browser settings. Here are the instructions for the most common browsers:
If you block technical cookies, you may be unable to sign in or keep your session open. The rest of the site remains accessible.
7. Changes
We may update this policy if we change the cookies we use. The last updated date appears at the top of the page.
8. Contact
If you have questions about this policy, write to support@visted.es. For how we process your personal data, see the privacy policy.