...
Last updated: September 2, 2026
Account data: name, email address, password (stored only as a secure hash), role (collector/vendor), and optional profile details such as location, store name, phone number, and avatar.
Marketplace data: watches you register, listings, orders, shipping addresses you enter at checkout, showroom addresses you choose to publish, viewing appointments, messages with other users, and reviews.
Uploads: photos and documents you add to watches or listings.
Push notifications (optional): if you turn on notifications, your browser gives us a push subscription — an endpoint URL at your browser vendor's push service plus two encryption keys — and we store it together with your browser (user-agent) string so we can tell your devices apart. We use it only to deliver the notifications you enabled. You can revoke it at any time from Settings or from your browser; subscriptions the push service reports as gone are deleted.
Technical & usage data: IP address, device and browser type, operating system, language preference, the site or page that referred you, and an approximate location (country) derived from your IP. We use this to secure the service (rate limiting, abuse prevention) and understand where interest comes from. Country is resolved on our own servers — your IP is never sent to a third-party location service — and for our waitlist your IP is stored only as a one-way hash, never in the clear.
Analytics: we run a self-hosted, cookieless instance of Umami on our own server. It counts page views and referrers in aggregate and does not identify you, build a profile, or share anything with a third party.
To run the marketplace: showing your listings, processing orders, delivering messages and notifications, sending account emails (verification, password reset), preventing fraud and abuse, and improving the product. We do not sell your personal data.
Orvion staff may access message content to investigate reports, disputes, or suspected fraud; each such access is recorded in an internal audit log.
Orvion uses two cookies, both essential: a session token that keeps you signed in, and a language preference (orvion-language) so pages render in the language you chose. We do not use advertising or cross-site tracking cookies.
We share data only with the providers needed to run Orvion:
Pages load fonts, images and scripts from orvion.watch itself — no third-party font, CDN or analytics host is contacted when you browse. We do not use advertising networks, third-party trackers, or data brokers, and we do not sell or rent your personal data.
Your public profile shows your name, avatar, role, trust score, verification status, and general location (country). Your email address and phone number are never shown publicly. If you publish a showroom for in-person viewings, the address you enter there is public by design; the phone number is disclosed only to a buyer whose viewing you confirm. When you buy or sell, the other party receives the information needed to complete the order, such as the shipping address you provide.
We keep your data while your account is active. Completed-order records are retained as required for dispute resolution and legal obligations. You can request deletion of your account and associated personal data by contacting support@orvion.watch.
Depending on your jurisdiction (e.g., GDPR in the EU), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Email us and we will respond within 30 days.
Passwords are hashed with PBKDF2 (a slow, salted one-way hash), traffic is encrypted with TLS, access to production systems is restricted, mutating requests are protected against CSRF, and uploads are checked by file type before storage. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.
Privacy questions, data requests, and general support: support@orvion.watch.