Legal

Privacy Policy

Last updated: May 24, 2026

Bumpy is a Chrome extension that automates actions on Depop on your behalf. We do not sell your data, track your browsing, or share your information with third parties. This policy explains exactly what we collect and why.

1. Who we are

Bumpy ("we", "our", "us") provides the Bumpy Chrome Extension and the website at bumpy.pro. This privacy policy applies to both the extension and the website.

If you have questions, contact us at: sellervault.ecom@gmail.com

2. What data the extension collects

The Bumpy Chrome Extension collects and stores the following data locally on your device:

License key — stored in Chrome's local storage to keep you logged in between sessions.
Device identifier — a randomly generated ID used to bind your license key to one device, stored locally.
Task preferences — settings you configure (speed, limits, schedules) stored locally in Chrome storage.

When you activate a license key, the extension sends the key and your device identifier to our license server (a Cloudflare Worker at depop-bot-license.seller-vault.workers.dev) to verify that the key is valid and not already in use on another device. No other data is transmitted.

The extension does not:

Read, store, or transmit your Depop login credentials
Access your messages, payment information, or personal profile data
Track your browsing activity outside of Depop
Collect analytics or usage metrics
Run any code on pages other than depop.com

3. How the extension interacts with Depop

The extension operates exclusively on depop.com pages while they are open in your browser. It simulates user actions (clicking buttons, navigating pages) to automate tasks like bumping and following. It does not access or store any Depop account data beyond what is visible on-screen while you're using it.

All automated actions are performed through your own authenticated Depop session. We never receive your Depop credentials or session tokens.

4. What the website collects

The Bumpy website (bumpy.pro) does not use cookies, tracking pixels, or analytics. No personal information is collected simply by visiting the website.

If you contact us via email, we will use your email address only to respond to your inquiry.

5. License key data

License keys are issued and managed via our Discord server. When a key is generated, we store the following in our Cloudflare KV database:

The license key (a randomly generated string)
Your Discord user ID (to prevent duplicate key generation)
The device identifier bound to the key upon first activation
The key's activation status and creation timestamp

This data is used solely for license verification. We do not associate it with any other personal information, and we do not share it with third parties.

6. Data sharing

We do not sell, rent, or share your personal data with any third parties. The only external service that receives any data from the extension is our Cloudflare Worker for license verification.

7. Data retention and deletion

License key records are retained for as long as the key is active. If you wish to have your data deleted, contact us at sellervault.ecom@gmail.com and we will remove your key records from our database within 30 days.

Locally stored data (key, device ID, preferences) can be cleared at any time by removing the Bumpy extension from Chrome.

8. Children's privacy

Bumpy is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us immediately.

9. Changes to this policy

We may update this privacy policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the extension or website after changes constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or data deletion requests, reach us at:

sellervault.ecom@gmail.com