2.1 Identification data
- Account information such as your name, email address, and language preferences.
- Encrypted authentication data, including hashed passwords.
- Two-factor authentication secrets and recovery metadata when you enable TOTP.
Back to home
Last updated: June 3, 2026
Privacy Policy
How we protect, use, and secure your personal information.
1. Introduction
This privacy policy explains how WatchLog (personal beta project operated by Ethan Pannekoucké) collects and processes personal data in compliance with the General Data Protection Regulation (GDPR) and applicable European law. It applies to all services offered through the WatchLog platform and related applications.
2. Data we collect
2.2 Collection content
- Details of the watches you add (brand, model, serial number, purchase information).
- Photographs, certificates, and documents you choose to upload.
- Notes, tags, and custom metadata associated with your collection.
2.3 Technical data
- Connection data such as IP address and access timestamps.
- Usage analytics (pages visited, actions performed) to secure and improve the service.
- Device and browser characteristics required to ensure compatibility and performance.
3. How we use your data
We process your personal data solely for explicit, legitimate purposes:
- To provide, personalise, and maintain the WatchLog platform and its features.
- To manage your account, authenticate your identity, and support security features.
- To detect fraudulent activity, prevent abuse, and protect your collection.
- To contact you regarding service updates, security alerts, or support requests.
- To produce aggregated statistics that help us improve performance and user experience.
5. Security measures
We apply organisational and technical safeguards proportionate to the sensitivity of the processed data:
Encryption of data at rest and in transit using state-of-the-art protocols.
Support for two-factor authentication (TOTP) for all accounts.
Continuous monitoring, logging, and vulnerability management of our infrastructure.
Restricted access to personal data limited to authorised personnel under confidentiality obligations.
6. Your rights
In accordance with GDPR, you may exercise the following rights at any time:
- Right of access – obtain a copy of your personal data.
- Right to rectification – correct inaccurate or incomplete data.
- Right to erasure – request deletion of your account and related data.
- Right to portability – export your data in a structured, commonly used format.
- Right to object – oppose processing for legitimate reasons or withdraw consent.
- Right to restriction – limit processing while we review a request or claim.
9. Contact
For any question regarding this policy or to exercise your rights, contact our Data Protection Officer at [email protected]
[email protected]7. Cookies and trackers
We use cookies necessary for authentication, security, and measuring the audience of our services. You can manage your preferences through your browser settings or by contacting us for more information.
8. Changes to this policy
We may update this policy to reflect legal, technical, or operational evolutions. If the changes are significant, we will notify you through the platform or by email before they become effective.