Privacy Policy

Last updated: May 11, 2026

Information We Collect

When you create an account on Metropolis Watches, we collect: • Email address — used for authentication and account access • Password — stored in hashed form using industry-standard encryption; we never store your plaintext password • Wishlist data — stored as associations between your account and watch models you save When you browse the site, we may collect basic usage data including page views and navigation patterns to improve the user experience. We do not collect sensitive personal data such as physical addresses, phone numbers, or payment information on our servers.

How We Use Your Information

We use the information we collect to: • Provide and maintain your account and wishlist across sessions • Authenticate your identity when you log in • Allow you to save and manage your favorite watches • Improve our website, product catalog, and user experience • Communicate with you about your account (if applicable) We do not sell, rent, or share your personal information with third parties for marketing purposes.

Account Data

Your account is identified by your email address. You may request deletion of your account and all associated data at any time by contacting us. Upon account deletion, all personally identifiable information is permanently removed from our systems. Wishlist data is stored in association with your user ID and is deleted automatically when your account is removed.

Cookies & Session Data

We use session cookies to maintain your logged-in state while you browse the site. These cookies are session-based and expire when you close your browser or log out. We may also use analytics tools that collect anonymous, aggregated browsing data (such as which brand or model pages are most visited) to understand how visitors use our catalog. This data cannot be used to identify individual users.

Third-Party Services

Metropolis Watches uses Supabase for database and authentication services. Your authentication credentials (email and hashed password) are processed and stored by Supabase in accordance with their privacy policy. Our site may contain links to external brand websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any external sites you visit.

Data Security

We take reasonable measures to protect your personal information from unauthorized access, disclosure, or destruction. Authentication is handled by Supabase using industry-standard security practices. While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we work to maintain appropriate safeguards consistent with industry standards.

Your Rights

You have the right to: • Access the personal information associated with your account • Correct any inaccurate information in your account profile • Request deletion of your account and all associated data • Object to the processing of your personal information (where applicable) To exercise any of these rights, please contact us using the information on our Contact page.

Children's Privacy

Metropolis Watches is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a minor without verified parental consent, we will take steps to remove that information.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. If we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or a notice on the website. Continued use of the site after any such changes constitutes your acceptance of the revised policy.

Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or the handling of your personal information, please contact us through our Contact page. We aim to respond to all privacy-related inquiries within 30 days.