Privacy

What Balancier keeps about you

In short: as little as possible, nothing for advertising, and everything can be erased with one button.

1. Without an account (guest)

Everything you do — your quiz, your wishlist, your collection, the photos you import — stays in your browser, on your device (“local storage”). Nothing is sent to Balancier. Clearing your browser data for this site erases everything.

2. With an account

If you sign in (email link, Google or Apple), the same data is also kept on a server, so you can find it on your other devices:

• your sign-in identity : your email address, and your name if Google or Apple provide it. With Apple, you can choose to hide your email: Balancier then only receives a relay address;
• your Balancier data : quiz, wishlist, collection (watches, prices paid, wear dates, notes, estimates), and the photos you have imported.
• your imported photos are stored on the same server (Supabase, Paris region), in a folder specific to your account. Each one is displayed through a long, randomly generated address: anyone who doesn't know it can't find it, and no one can browse your folder. A photo you remove is deleted from the server within the following days; deleting your account deletes the whole folder.
• the documents in your insurance file (invoices, certificates, photos of the case back or serial number) are stored in a private space on the same server, with no public address: only your account, signed in, can read them. A document you remove is deleted at once; deleting your account deletes them all. The PDF of the file is made in your browser: it never goes through Balancier's server. Without an account, these documents stay in your browser.

Each account can read and modify only its own data : the rule is written into the database itself. This data is used first and foremost to make the site work for you.

What Balancier's publisher sees. To understand how the site is used and improve it, the publisher can view account data from a restricted dashboard: email address, sign-up method and date, date of last sign-in, collection, wishlist, quiz answers and daily alert. Only accounts registered as administrators in the database have access to it. This data is not sold, shared or used for advertising. Visitors without an account do not appear in it: their data stays in their browser. You can object to this, or ask for the data to be erased, at contact@balancier.app, or delete your account yourself.

3. The emails you ask for

The daily alert (if you turn it on)

From your wishlist, you can get an email every morning with the new listings for your watches. For this, Balancier keeps on its host (Netlify): your email address, the watches you follow (brand, model, reference, target price), your settings and the list of listings already reported. Nothing is sent without the confirmation click you receive by email; every email carries a “Stop the alert” link that erases all of this immediately. The emails are sent by Resend (European Union, Ireland).

In the Balancier iPhone app, the daily alert can also reach you through a notification. In that case there is no email address: Balancier keeps the notification ID that the iPhone gives it (a randomly generated code that doesn't say who you are), and hands it every morning to the notification service of Apple, which delivers it. You can turn off notifications at any time in the iPhone's Settings; stopping the alert erases the ID.

The Sunday email (if you ask for it)

“Your watch week” goes out every Sunday morning to the address you give, once you have confirmed through a link (nothing is sent without that click). To write it, Balancier keeps on its server (Netlify, the site's host) your address and the list of your watches and wishlist watches: brand, model, reference, price paid, latest market value, target price and days worn over the last three months — nothing else. Every email carries a “Stop receiving this email” link that erases all of this at once. It too is sent through Resend.

Audience measurement, without cookies

To know how many people visit, what they look at and which retailer sites they go on to, each page sends the server its address, the site you came from and, when you click through to another site, the name of that site. Nothing is stored on your device (no cookie, no identifier). To count the visitors of a given day, the server computes a fingerprint of your IP address and your browser, scrambled with a secret drawn at random each day and erased the next: it is impossible to recover your address or to recognize you from one day to the next. Your IP address is not kept. Only daily totals are retained.

With each page view, the server also records categories that identify no one: the app or the website, the type of device (iPhone, Android, tablet, computer), the time, the language of the page, and how many days the device has known Balancier (first day, a few days, more than five — a count the page already keeps for the rating request, without any identifier). When you save a watch, finish the questionnaire or share a watch page, that action is counted, without saying which one or by whom. When a search finds no watch in the catalogue, its text is kept (with no link, address or number, and without saying who typed it) to know which watches to add. These categories only feed the totals of the publisher's dashboard.

The daily ritual

Your mystery-watch game, your duel votes and your wrist photos stay with your collection (in your browser, or in your account). To show “63 % of voters”, Balancier counts each day's votes and games without knowing who votes : each vote is stored under an anonymous fingerprint that changes every day, the same as for audience measurement; no IP address is kept. In the iPhone app, if you turn on the daily reminder, Balancier keeps your iPhone's notification token, the chosen time and your time zone — “Stop” deletes them.

Your showcase

If you publish your showcase, it becomes a public : anyone with its link can see it. It shows your nickname, the watches you ticked (brand, model, reference, diameter, online photo, days worn), your figures (days on the wrist, streak, achievements, icons) and, if you chose so, the prices you paid and your month of wrist photos. Never a serial number, document, note or address; a photo kept only in your browser doesn't appear. It isn't offered to Google unless you ask. “Remove my showcase” deletes it from the server at once.

Links to merchants

Some links to merchants (eBay, Chrono24, Watchfinder, Chronext…) may be partner links : if you buy after a click, the merchant may pay Balancier a commission, with no change to your price. The link then carries a Balancier identifier and where the click came from (“listing”, “watch”…), never your identity. The merchant, like any site you visit, applies its own rules (cookies included).

3a. Balancier+, the subscription

If you subscribe to Balancier+ :

• payment goes through Apple (in the app) or Stripe (on the web). Balancier never sees your card: it only learns that your account is subscribed, until what date, and where the purchase came from;
• RevenueCat (United States) keeps the subscription records for the App Store and the web. It receives your Balancier account ID — not your name — and, for a purchase on the web, your email address for the receipt;
• weekly tracking : to alert you when a market value moves by 5% or a service or warranty date is coming up, your page sends the server a summary of your collection — brand, model, reference, displayed market value, service and warranty dates — and, in the app, your iPhone's notification token. This summary is erased if you ask, and is used for nothing else;
• the count of your full searches and scans for the month is stored under your account ID, without their content.

4. What Balancier doesn't do

• no advertising, no selling or sharing of your data;
• no advertising trackers, and no audience measurement that follows you (the site's own, described above, doesn't know who you are);
• no advertising cookies: the site only uses your browser's storage, which it needs to work.

5. The services used

• Netlify hosts the site;
• Supabase hosts the accounts and their data, in the European Union (Paris region);
• Resend sends the sign-in emails and the daily alert emails;
• Google and Apple, only if you choose to sign in with them;
• Apple delivers the daily alert notifications, if you turn them on in the iPhone app;
• eBay and Serper receive the text of a search (for example “Omega Speedmaster”) when you look for a listing, a photo or a market value — never your identity;
• Google Fonts provides the fonts, and jsDelivr the sign-in module;
• watch photos are displayed from the sites that publish them;
• when you paste the link to a dealer's page, Balancier reads that page to get the photo and the specs from it: the dealer sees a visit from Balancier's server, not from you.
• Anthropic (Claude) receives a watch's name when you ask for “Full investigation” or “Write its story”, and the photo you give it when you ask to “Recognise this watch” — never your identity. Balancier does not keep that photo once the watch is recognised; under its commercial terms, Anthropic does not use it to train its models. It only becomes your watch's photo if you add the watch.

As with any website, these services see your IP address when your browser contacts them.

6. How long

As long as your account exists. If you delete it, everything it keeps on the server is erased. The daily alert lasts until you stop it (link in every email); a request that is never confirmed receives no further email.

7. Your rights

At any time, from the account button at the top right, you can:

• download your data (complete file);
• delete your account and everything it keeps on the server.

Under the GDPR, you also have the rights of access, rectification, erasure, objection and portability. For any question: contact@balancier.app. You can also file a complaint with the CNIL (the French data protection authority).

Last updated: October 22, 2026.