SECURITY

Separate accounts. Clear boundaries.

Understand the difference between your Lane account, local marketplace sessions and an optional Cloud connection.

Local

Your signed-in Chrome session, with Lane Bridge. Keep the computer and Chrome available for local work.

Browser session → Lane Bridge → Lane

Cloud

A separate opt-in Vinted connection for supported operations. Check account readiness and current availability.

Opt-in connection → supported Cloud work
  1. 1

    Sign in directly

    Your marketplace password belongs on the marketplace, never in a Lane form.

  2. 2

    Choose the connection

    Local sessions and opt-in Cloud permissions are separate. Check readiness for each operation.

  3. 3

    Revoke when needed

    Disconnect the relevant session or device. Reconnecting does not grant buying consent.

Your Lane account and approved devices

Your Lane account is shared between web and desktop. Desktop opens the website for sign-in and device approval; it does not keep a separate password database.

Device approvals expire, require the desktop’s verifier and can be consumed once. Device tokens are stored as hashes on the server; access expires after 15 minutes. A device can renew access until its 30-day authorisation expires or is revoked.

Local marketplace sessions

Sign in directly on the marketplace. Local only uses your signed-in Chrome session; Desktop marketplace sessions are isolated per local profile. Windows-protected encryption protects saved Desktop cookies at rest.

This does not protect against someone already controlling your Windows account. Local operations depend on the computer, browser and session staying available.

Vinted Cloud is a separate choice

If you explicitly enable Vinted Cloud, Lane Bridge transfers only the required authenticated session tokens, which Lane encrypts server-side. Lane does not collect your marketplace password. Revoke Cloud to remove that material without signing out of Vinted.

Check the current Cloud status and supported operations in your account. A linked account or enabled preference does not prove a healthy connection, and reconnecting does not grant new purchase consent.

Verification and safe support

Marketplace MFA, CAPTCHA, payment authentication and expired sessions require your own interaction. Lane does not bypass them. Automatic checkout is not available yet.

Never share passwords, cookies, tokens or private headers in support diagnostics. Only safe device health metadata is sent to the account dashboard. Use the contact form for support and keep account secrets or vulnerability details out of public posts.

The software has not undergone an independent security audit.