This policy explains what watchbuilder.co (operated by Tom Sharman in the United Kingdom, the data controller, “we”) collects and why. We deliberately collect as little as possible. For any privacy question or request, contact support@watchbuilder.co.
| Data | Why |
|---|---|
| Username, your email address & a securely hashed password | To create and authenticate your account. We collect your email to verify your account, secure it, and send essential service notices (verification and security) — never marketing. Passwords are salted and hashed — we never store or see the plain password. You can delete your email by deleting your account. |
| If you sign in with Google or Apple: a provider account identifier and your email address | To create and recognise your account on return. We receive these from Google/Apple after you approve the sign-in — we never see your Google or Apple password. Apple users may use “Hide My Email”, in which case we only ever see the relay address. |
| Your saved watch designs, ratings, comments, and game stats (Crowns, streaks, badges) | To run the game and community gallery. |
| IP address (transiently) | Rate-limiting, view/try-on de-duplication, and abuse prevention. Not used to build a marketing profile. |
| Payment records (which Crown pack, amount, timestamp, Stripe session id) | To credit purchases and handle refunds/disputes. Card details are handled entirely by Stripe — we never receive or store them. |
| Local storage in your browser (auth token, onboarding-seen flag) | To keep you signed in and avoid repeating the intro tour. These are functional, not advertising, cookies. |
We share data only with service providers needed to run the Service: Stripe (payment processing), Google / Apple (only if you use their sign-in — the exchange is initiated by you), and our own hosting provider. We do not sell your data. We may disclose data if required by law.
Account data is kept while your account exists. Transient IP data used for rate-limiting is short-lived. Payment records are retained as long as needed for tax, accounting, and dispute obligations. When you delete your account, your profile, designs, ratings, and comments are permanently removed (payment records may be retained where law requires).
The Service is not directed at children under 16. We do not knowingly collect data from them.
We may update this policy; the date above shows the latest version. Questions or requests: support@watchbuilder.co.