Privacy Policy
This page explains what data Watchlert collects, why, how long it is kept, and what rights you have over it. It is written in plain language — no legalese.
Who is responsible for your data?
Watchlert is an independent service operated from the Netherlands. As the operator, we are the data controller under the General Data Protection Regulation (GDPR / AVG).
Contact: privacy@watchlert.nl
What data we collect and why
Watchlert only collects what it needs to provide the service:
| Data | Purpose | Stored |
|---|---|---|
| Account email address | Creating your account and sending change alerts | Supabase Auth (EU servers) |
| Monitored URLs | Knowing which pages to watch on your behalf | Supabase database (EU) |
| Page snapshots (text) | Detecting changes by comparing current content to the last known state | Supabase database (EU) |
| Change records | Showing you the diff of what changed and when | Supabase database (EU) |
| Waitlist email (if submitted) | Notifying you when Watchlert opens to the public | Supabase database (EU) |
We collect no analytics, set no tracking cookies, and use no third-party advertising or social widgets. A cookie-consent banner is therefore not required.
Where your data is stored
All data is stored in a Supabase Postgres database in the eu-central-1 region (Frankfurt, Germany). No personal data leaves the European Economic Area except for transactional email delivery through Resend (US-based, but bound by standard contractual clauses).
How long we keep your data
Your account data (email, monitors, snapshots, change records) is retained for as long as your account exists. When you delete your account, all associated data is permanently removed from the database immediately — there is no recovery period.
Waitlist entries are kept until Watchlert launches or until you ask to be removed (email us at the address above).
Legal basis for processing
We process your data on the basis of contract performance (Art. 6(1)(b) GDPR) — it is necessary to deliver the monitoring service you signed up for — and legitimate interest (Art. 6(1)(f) GDPR) for sending operational emails (alerts, welcome message) that are directly related to the service you requested. We do not rely on consent for any of the above, so there is nothing to withdraw for the core service.
Your rights under GDPR/AVG
As a person in the EU you have the right to:
- Access:Request a copy of the personal data we hold about you.
- Rectification:Ask us to correct inaccurate data.
- Erasure:Delete your account at any time from the dashboard — this immediately removes all your data. You can also email us to request removal of your waitlist entry.
- Restriction:Ask us to pause processing while a dispute is being resolved.
- Portability:Request your data in a machine-readable format.
- Object:Object to processing based on legitimate interest.
- Lodge a complaint:File a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.
To exercise any of these rights (except self-service account deletion), email privacy@watchlert.nl. We will respond within 30 days.
Deleting your account
You can permanently delete your account — and all associated data — from your dashboard at any time. Once confirmed, the deletion is immediate and cannot be undone.
Changes to this policy
If we make material changes to this policy we will update the date at the top of this page and, where appropriate, notify you by email.