Privacy policy

01 Data controller

The data controller is the site publisher, whose details are given in the legal notice.

02 Data collected

The site only stores:

• your account: last name, first name, e-mail address, profile picture and Google identifier, sent by Google when you choose “Continue with Google”, and the sign-up date;
• your creations: name, composition, price and creation date of your watches;
• your orders: number, date, status, delivery fees and ordered watches;
• the description typed into the creation assistant (300 characters maximum);
• technical data: IP address, date and requested page, kept in the server logs.

03 Data not collected

The delivery and payment fields of the order page (address, phone, bank card) are not sent to the server: they are neither stored nor used.

No password is stored, since sign-in is done with Google. The newsletter sign-up is not active: the address entered is not kept.

04 Purposes

This data is used to create and manage your account, save your watches, process your orders and keep the site secure. It is not used for advertising or profiling, and it is not sold.

05 Third-party services

Two external services are involved:

• Google: authentication when you sign in. Its own privacy policy applies at that step;
• OpenRouter: provider of the AI model behind the creation assistant. It only receives the description text, never your identity or account data, and may process it outside the European Union. Avoid entering personal information there.

06 Cookies and local storage

A session cookie is set when you sign in: it is required for the account to work and is not used for any tracking.

Your browser also keeps, on your device only, the draft of the watch you are creating so that you do not lose it.

The site uses no advertising cookie or audience-measurement tool, and hosts its own fonts: no request is sent to external font services.

07 Retention period

Account, watch and order data is kept as long as the account exists. As this is an educational project, it may be deleted when the project ends. Technical server logs are kept for one year at most.

08 Your rights

Under the GDPR, you may access, correct and erase your data, restrict its processing, object to it and request its portability. You can delete your unordered watches from “My watches”; full account deletion is requested from the publisher (see the legal notice).

If you disagree, you may lodge a complaint with the CNIL (cnil.fr).

09 Security

The site is served over HTTPS and administrative access to the server is protected.

10 Changes to this policy

This page may change along with the site. The date of the last update is shown at the top of the page.