Last updated: September 5, 2026
This Privacy Policy explains how PocketSneaker collects, uses, stores and otherwise processes Personal Data when you use the PocketSneaker website, web application, mobile applications and related services (collectively, the "Service").
PocketSneaker is operated by:
CodeNext di Fabio Strazzante
Via Don Santo Rota 10
24026 Cazzano Sant'Andrea (BG)
Italy
Email: support@pocketsneaker.app
For the purposes of applicable data protection laws, including the General Data Protection Regulation ("GDPR"), CodeNext di Fabio Strazzante is the Data Controller unless otherwise stated.
By using PocketSneaker, you acknowledge that your Personal Data will be processed as described in this Privacy Policy.
The Personal Data we collect depends on how you use PocketSneaker.
We may collect the following categories of information.
When you create or use a PocketSneaker account, we may process:
If you register or sign in through a third-party authentication provider, we may receive information from that provider as described below.
On supported iOS applications, users may register or authenticate using Sign in with Apple.
Depending on the choices made by the User and the information provided by Apple, PocketSneaker may receive:
PocketSneaker does not receive your Apple Account password.
Apple processes information independently in accordance with its own privacy documentation.
Users may register or authenticate using Discord where this option is available.
When Discord authentication is used, PocketSneaker may receive:
PocketSneaker does not receive your Discord password.
Discord may separately process information relating to your use of its authentication service under its own privacy policy.
PocketSneaker allows Users to manage personal or professional inventories.
Information entered into the Service may include:
Some inventory information may not identify a person by itself, but may constitute Personal Data when associated with a PocketSneaker account.
Users may upload content including:
These files may contain Personal Data relating to the User or to third parties, such as names, addresses, order numbers or other information.
Users are responsible for ensuring that they are authorized to upload Personal Data relating to other individuals.
Users should avoid uploading Personal Data that is not necessary for their use of PocketSneaker.
Users may choose to publish products through the PocketSneaker Marketplace or other public features.
Information made visible may include:
Content explicitly published to Marketplace features may be visible to other PocketSneaker Users.
Additional private product photographs, invoices, shipping labels and other documents stored in private inventory areas are not intended to be made publicly visible.
Users may voluntarily provide social usernames or identifiers to allow other Users to contact them outside PocketSneaker.
Supported information may include:
When a User chooses to display this information through the Marketplace or other public functionality, it may be visible to other PocketSneaker Users.
Providing social contact information is optional.
PocketSneaker does not control communications or transactions that subsequently take place through those third-party platforms.
PocketSneaker may allow Users to connect their StockX account.
The integration may allow PocketSneaker to:
To provide the integration, PocketSneaker may process and store:
PocketSneaker does not store the User's StockX password.
Authentication tokens are used only to provide the integration and perform operations requested by the User.
Users may disconnect the integration where such functionality is available.
When you use PocketSneaker, certain information may be collected automatically, including:
This information may be processed for security, troubleshooting, analytics and operation of the Service.
Where the GDPR or similar legislation applies, PocketSneaker processes Personal Data only where a valid legal basis exists.
We process account, inventory, product, document, integration and related information in order to:
Legal basis: performance of a contract or steps taken at the User's request before entering into a contract.
We process authentication information to create, identify and secure User accounts, including authentication through Apple and Discord.
Legal basis: performance of a contract and our legitimate interest in providing secure authentication.
When a User voluntarily connects StockX, we process the information necessary to operate that integration and perform actions requested by the User.
Legal basis: performance of the Service requested by the User.
We process and display information that Users intentionally choose to publish through Marketplace functionality.
Legal basis: performance of the Service requested by the User.
Users control whether eligible products and optional social contact information are made publicly visible.
We may use the User's email address to send communications necessary for the operation of the Service, including:
Legal basis: performance of a contract, compliance with legal obligations and, where applicable, legitimate interests in operating and securing the Service.
PocketSneaker uses Firebase Cloud Messaging to deliver push notifications to supported devices.
These notifications may include operational or account-related information.
Users may control push-notification permissions through their device settings.
Legal basis: performance of the Service and, where applicable, the User's consent or device permission.
If PocketSneaker introduces promotional push notifications in the future, such communications will be handled in accordance with applicable consent requirements.
Personal Data and technical information may be processed to:
Legal basis: our legitimate interests in protecting the security, availability and integrity of PocketSneaker and its Users, and compliance with legal obligations where applicable.
Diagnostic and technical information is processed to identify software errors, crashes and other technical problems.
Legal basis: our legitimate interest in maintaining the reliability, security and performance of the Service.
PocketSneaker uses analytics technologies to understand how the website and web application are used and to improve the Service.
Where required by applicable law, analytics technologies that are not strictly necessary are activated only after the User has provided consent.
Legal basis: consent where required by law.
PocketSneaker may use Meta technologies for advertising measurement, attribution and related marketing purposes.
Where required, these technologies are activated only after the User has provided the appropriate consent through PocketSneaker's cookie or privacy controls.
Legal basis: consent.
We may process Personal Data where necessary to:
Legal basis: compliance with a legal obligation and, where applicable, legitimate interests in establishing or defending legal claims.
PocketSneaker uses third-party providers to operate the Service.
These providers may process Personal Data only to the extent necessary for their respective functions.
PocketSneaker's backend infrastructure, database, images and uploaded documents are hosted using IONOS infrastructure.
Depending on the functionality involved, IONOS may process:
IONOS acts as an infrastructure and hosting provider.
PocketSneaker uses Resend to deliver transactional emails.
Information processed through Resend may include:
Email content may include information necessary to provide the requested communication.
PocketSneaker uses Firebase Cloud Messaging, provided by Google, to deliver push notifications.
Information processed may include:
PocketSneaker currently uses Firebase for push notifications and not for Firebase Analytics.
PocketSneaker uses Sentry for error monitoring and technical diagnostics.
Sentry may receive information such as:
PocketSneaker uses Sentry for error monitoring and does not intentionally use Session Replay for the purposes described in this Policy.
We seek to minimize Personal Data included in diagnostic reports.
PocketSneaker uses Google Analytics 4 on the public website and web application and, where enabled, on supported mobile applications to understand usage and improve the Service.
Depending on the configuration and consent provided, Google Analytics may process:
Google Analytics is optional and is activated only after analytics consent where required by applicable law.
PocketSneaker uses Google Tag Manager to manage tags and scripts on the website and web application.
Google Tag Manager may facilitate the loading of other technologies described in this Policy and the Cookie Policy.
Tags requiring consent are configured to respect applicable consent choices.
PocketSneaker may use Meta Events Manager and related Meta technologies for analytics, advertising measurement and related marketing purposes. On the website and web application, these technologies are managed through Google Tag Manager; on supported mobile applications, they may be implemented through the relevant mobile integration where enabled.
Depending on the User's consent and configuration, information may include:
Meta technologies are used for analytics, advertising measurement and related marketing purposes.
Meta technologies are optional and are activated only after advertising consent where required by applicable law.
PocketSneaker uses Sign in with Apple on supported iOS applications.
Apple may independently process Personal Data relating to the authentication process according to Apple's own privacy practices.
PocketSneaker receives only the information made available to it through Sign in with Apple.
PocketSneaker may use Discord for account authentication.
Discord independently processes information relating to its services according to its own privacy policy.
PocketSneaker receives only information necessary for the authentication functionality described in this Policy.
Users may also voluntarily provide their Discord username as public contact information, independently of Discord authentication.
When a User voluntarily connects a StockX account, information may be exchanged between PocketSneaker and StockX to provide the requested integration.
StockX independently processes Personal Data under its own terms and privacy policy.
PocketSneaker processes authentication tokens and integration data only to provide requested functionality.
PocketSneaker is operated from Italy and its primary application infrastructure is hosted through IONOS.
Some service providers used by PocketSneaker may process Personal Data outside the European Economic Area ("EEA"), including in the United States.
These providers may include, depending on the Service used:
Where the GDPR applies and Personal Data is transferred outside the EEA to a country that has not received an adequacy decision from the European Commission, PocketSneaker relies on appropriate safeguards as required by applicable law.
These safeguards may include:
The specific transfer mechanism may vary depending on the provider and processing activity.
Users may contact PocketSneaker for additional information regarding safeguards applicable to international transfers.
PocketSneaker retains Personal Data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Account information, inventory data and related User Content are generally retained while the PocketSneaker account remains active.
When an account is deleted, associated Personal Data is removed from active production systems as promptly as technically reasonably possible, subject to the exceptions described below.
Images, invoices, labels, receipts and other uploaded files are generally retained for as long as they remain associated with the User's active account or until the User deletes them where deletion functionality is available.
StockX authentication tokens are retained for as long as necessary to maintain the User-requested integration.
They may be deleted or invalidated when the integration is disconnected, the relevant account is deleted or the token otherwise expires or becomes unnecessary.
Technical, diagnostic and security information is retained for the period reasonably necessary to:
Retention may vary depending on the type of log and the service provider involved.
Analytics and advertising information is retained according to the settings configured by PocketSneaker with the relevant provider and applicable legal requirements.
Where processing is based on consent, Users may withdraw consent at any time through the available privacy, cookie or in-app controls.
Withdrawal does not affect processing lawfully performed before consent was withdrawn.
Information processed in connection with transactional email delivery may be retained by PocketSneaker and Resend for the period necessary to deliver messages, diagnose delivery issues, maintain security and comply with applicable legal requirements.
PocketSneaker performs daily backups for disaster recovery and business continuity.
Backup copies may be retained for up to 12 months.
As a result, following account deletion, residual copies of Personal Data may remain in secured backups until those backups reach the end of their normal retention cycle.
Backup data:
When backups expire, they are deleted or overwritten according to the normal backup cycle.
Users may delete or request deletion of their PocketSneaker account through available account functionality.
Following deletion:
PocketSneaker may retain specific information after deletion where necessary to:
PocketSneaker provides functionality that allows Users to export supported inventory information.
Users are encouraged to export information they wish to retain before deleting their account.
Where applicable data protection law grants a right to data portability, Users may request Personal Data they provided to PocketSneaker in a structured, commonly used and machine-readable format where technically and legally applicable.
Users should understand that information they intentionally publish through Marketplace functionality is intended to be viewed by other Users.
This may include:
Once information has been disclosed outside PocketSneaker, for example where another User copies information or contacts a User through Instagram, Discord or X, PocketSneaker may no longer be able to control how that third party processes the information.
Users should not publish information they wish to keep private.
Users may upload documents or information containing Personal Data relating to other individuals.
For example, an invoice or shipping label may contain a third party's:
Users are responsible for ensuring that they have an appropriate legal basis or authorization to upload and process such information through PocketSneaker.
PocketSneaker should not be used to store unnecessary Personal Data relating to third parties.
PocketSneaker is not designed to collect special categories of Personal Data such as:
Users should not intentionally upload such information unless strictly necessary and legally permitted.
If sensitive information is inadvertently included in an uploaded document, it will generally be treated as part of the User-provided content under the same security and retention practices described in this Policy.
The PocketSneaker website and web application may use cookies, local storage, pixels and similar technologies.
Supported mobile applications may use application storage, software development kits (SDKs), device identifiers and similar technologies. These may be used for the same purposes described in this section; they are not necessarily browser cookies.
These technologies may be used for:
Strictly necessary technologies may operate without consent where permitted by applicable law.
Analytics, advertising and other non-essential technologies are subject to consent where required.
More detailed information regarding these technologies and available controls is provided in the PocketSneaker Cookie Policy.
Where processing relies on consent, Users may refuse or withdraw it at any time. Analytics consent and advertising consent are separate choices.
For website tracking technologies, consent preferences can be managed through the privacy or cookie controls made available on PocketSneaker. For supported mobile applications, preferences can be managed through the in-app privacy controls made available in the application.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Refusing optional analytics or advertising technologies does not prevent access to the core PocketSneaker Service.
Push notifications require permission from the User's device operating system.
Users may disable push notifications at any time through their device settings.
Disabling push notifications does not prevent Users from accessing PocketSneaker.
Certain important information relating to account security or the Service may instead be communicated through email or within the application.
PocketSneaker implements technical and organizational measures designed to protect Personal Data against:
Measures may include, where appropriate:
No online service can guarantee absolute security.
Users are responsible for protecting their account credentials and should promptly contact PocketSneaker if they suspect unauthorized access.
If PocketSneaker becomes aware of a Personal Data breach, it will investigate the incident and take appropriate measures.
Where required by applicable data protection law, PocketSneaker will notify the competent supervisory authority and affected Users within the timeframes required by law.
PocketSneaker is not intended for children under the age of 13.
We do not knowingly collect Personal Data from children under 13.
If we become aware that Personal Data has been collected from a child under 13 without appropriate authorization, we will take reasonable steps to delete that information.
Users aged between 13 and the age at which they can independently consent to relevant Personal Data processing under the law applicable to them may require authorization from a parent or legal guardian for certain processing activities.
Where local law establishes a higher minimum age or requires parental authorization, PocketSneaker will apply the relevant mandatory requirements.
Parents or legal guardians who believe that a child has provided Personal Data contrary to applicable requirements may contact support@pocketsneaker.app.
PocketSneaker does not currently use Personal Data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on Users within the meaning of Article 22 GDPR.
Statistics, market values, inventory estimates and other automated calculations displayed by PocketSneaker are intended to assist Users and do not constitute automated decisions about the User's legal rights or eligibility.
Depending on where you live, applicable privacy laws may grant you rights concerning your Personal Data.
Where the GDPR applies, these include the right to:
These rights may be subject to exceptions or limitations provided by applicable law.
Requests may be sent to support@pocketsneaker.app.
PocketSneaker may request information reasonably necessary to verify the identity of the person making the request.
We will respond within the period required by applicable law.
Where processing is based on PocketSneaker's legitimate interests, Users may have the right to object to such processing on grounds relating to their particular situation.
PocketSneaker will stop the relevant processing unless there are compelling legitimate grounds to continue or the processing is necessary for the establishment, exercise or defence of legal claims.
Where Personal Data is processed for direct marketing purposes, Users may object to such processing at any time.
Where processing is based on consent, consent may be withdrawn at any time.
This includes, where applicable:
Withdrawal does not affect the lawfulness of processing performed before consent was withdrawn.
Users in the European Economic Area have the right to lodge a complaint with the data protection supervisory authority responsible for their place of residence, place of work or the location of an alleged infringement.
As PocketSneaker is operated from Italy, the relevant Italian supervisory authority is the:
Garante per la protezione dei dati personali
Users are encouraged, but not required, to contact PocketSneaker first so that we may attempt to address their concerns.
PocketSneaker is available internationally.
Users outside the EEA may have additional rights under the privacy laws applicable in their jurisdiction.
Where applicable law provides rights such as access, correction, deletion, portability, restriction or opt-out rights, Users may contact PocketSneaker using the details provided in this Policy.
PocketSneaker will honor applicable mandatory privacy rights based on the User's jurisdiction.
Depending on the User's state of residence and whether the relevant statutory thresholds apply to PocketSneaker, United States privacy laws may provide additional rights.
These may include rights to:
PocketSneaker does not sell Personal Data in exchange for monetary consideration.
However, the use of certain advertising technologies, such as Meta technologies, may be classified as "sharing", "targeted advertising" or a similar concept under some privacy laws.
Where legally required, Users will be provided with appropriate mechanisms to opt out of such processing through PocketSneaker's privacy or cookie controls.
Browser "Do Not Track" mechanisms are not interpreted consistently across the Internet.
Where applicable law requires PocketSneaker to recognize a legally valid universal opt-out or similar privacy preference signal, PocketSneaker will use reasonable measures to honor such signals for relevant processing.
PocketSneaker may disclose Personal Data where reasonably necessary to:
PocketSneaker will seek to limit disclosure to the information reasonably required by the relevant legal request.
If PocketSneaker or the business operating PocketSneaker is involved in a merger, acquisition, restructuring, sale of assets or similar transaction, Personal Data may be transferred as part of that transaction where permitted by applicable law.
Any recipient will remain subject to applicable data protection obligations.
Where required, affected Users will be informed of material changes concerning the controller of their Personal Data.
PocketSneaker does not sell Users' Personal Data to third parties in exchange for money.
As described above, certain analytics or advertising technologies may involve disclosures that are legally treated as "sharing" or targeted advertising in some jurisdictions.
Users can manage eligible processing through the privacy controls provided by PocketSneaker.
PocketSneaker may update this Privacy Policy from time to time to reflect:
The "Last updated" date at the top of this Policy indicates when it was most recently revised.
Where changes materially affect Users' rights or how Personal Data is processed, PocketSneaker will provide appropriate notice where required by law.
Where consent is legally required for a new processing activity, PocketSneaker will obtain that consent before carrying out the relevant processing.
For questions about this Privacy Policy, Personal Data processed by PocketSneaker or the exercise of privacy rights, contact:
CodeNext di Fabio Strazzante
Via Don Santo Rota 10
24026 Cazzano Sant'Andrea (BG)
Italy
Email: support@pocketsneaker.app