Privacy Policy

Privacy Policy

Last updated: October 2026

This English text is a translation provided for convenience. The French version is the legally binding one; in the event of any discrepancy, the French version prevails.

On this pageUpdated: October 2026

1. Data controller

The data controller is Lucas Chauveaux EI, trading as coindesmontres.fr, registered under SIREN number 131 157 315, whose registered office address is available on request. Contact: contact@coindesmontres.fr.

2. Data processed, purposes and legal bases

  • Account — e-mail address, username, encrypted password and, where applicable, photograph, description and location; when signing in via Google, the name associated with the Google account, which is not displayed. Purpose: account management. Legal basis: performance of the contract.
  • Content and services — posts, messages, listings and watch passport data, including the serial number, stored in encrypted form. Purpose: provision of the services. Legal basis: performance of the contract. Only a cryptographic fingerprint, from which the data cannot be reconstructed, is timestamped on the Bitcoin blockchain.
  • Requests to access a shared passport — first name and, where applicable, last name of the requester, disclosed to the passport owner. Legal basis: performance of the contract.
  • Identity verification (optional) — copy of an identity document. Legal basis: consent.
  • Watchmaker space — SIRET number, Kbis extract, identity document of the legal representative and business contact details. Purpose: verification of the watchmaker. Legal bases: performance of the contract and legitimate interest.
  • Connection data — IP address, date and time of each registration, login and publication, stored in encrypted form and disclosed only upon request of the judicial authority. Legal basis: legal obligation (article 6 of French Law No. 2004-575 of 21 June 2004 and Decree No. 2021-1362). The IP address is also used temporarily to prevent abuse (legitimate interest).
  • Audience measurement — pages viewed, visit duration and source, device, country, clicks, errors and page speed. Without consent, this measurement works without cookies and without storing anything on the device: the visitor is only an anonymous fingerprint renewed every day, never linked to an account. Legal basis: the publisher’s legitimate interest in knowing how the Site is used. With the visitor’s consent, visits by a signed-in member may also be linked to their internal identifier (never their name or e-mail). Legal basis: consent. Visits are never recorded.

3. Recipients and transfers

The data is never sold. It is disclosed, strictly to the extent necessary, to the following processors: Vercel and Neon (hosting, United Kingdom), Cloudinary (file storage), Resend (e-mail delivery), PostHog (audience measurement, European Union), Upstash (abuse prevention), Google (authentication), Stripe (payment services) and OpenTimestamps (timestamping). Transfers to the United Kingdom rely on an adequacy decision of the European Commission; transfers to the United States are governed by the Data Privacy Framework or by the European Commission’s standard contractual clauses.

4. Retention periods

  • Account — for the lifetime of the account. Account deletion is immediate and permanent; published contributions remain under the label “Deleted user” and the history of watches remains attached to their passport.
  • Identity documents — deleted as soon as the request has been reviewed and no later than thirty days after submission.
  • Watchmakers’ documents — no more than twelve months after closure of the space or refusal of verification.
  • Requests to access a shared passport — until the link is deactivated.
  • Connection data — one year from the operation, then automatic deletion.
  • Messages and notifications — for the lifetime of the account.
  • Moderation log and banned addresses — five years from the decision, the limitation period for civil actions, then automatic deletion.
  • Technical error log — limited to the last two hundred events, older ones being deleted automatically.
  • Addresses unsubscribed from emails — until the unsubscription is cancelled, so that they are no longer written to.

5. Data subject rights

In accordance with Regulation (EU) 2016/679 and French Law No. 78-17 of 6 January 1978, every person has the right of access, rectification, erasure, restriction, objection and portability, the right to withdraw consent at any time and the right to set instructions regarding their data after death. These rights may be exercised at contact@coindesmontres.fr. A complaint may be lodged with the CNIL.

6. Cookies and trackers

The cookies listed above are strictly necessary for the Site to work. Audience measurement (Vercel Web Analytics, PostHog) works without cookies for all visitors. Measurement markers that recognise a visitor from one visit to the next are stored on the device only with consent, which can be changed at any time through the “Cookie settings” link at the bottom of the page. This choice is kept for six months and then asked again.

Other documentsAnd for any question
Legal noticeTerms of useWrite to uscontact@coindesmontres.fr