Privacy Policy
1. Data Controller
The data controller is Einvar, publisher of Carried.io. Contact: contact@carried.io
2. Data Collected
Carried.io does not collect any personal data as defined by the GDPR (name, email, address, etc.). The only data processed by the site is publicly available game data accessed through the official Raider.IO and Warcraft Logs APIs: • Character names and servers • Class, specialization, and item level • Game statistics (dungeons, combat logs) • Raider.IO scores This data is public, freely accessible by anyone through the relevant APIs, and cannot be used to identify a natural person.
3. Legal Basis
Processing is based on legitimate interest (Article 6.1.f GDPR): providing a public game data analysis tool to the World of Warcraft community. No consent is required as no personal data is collected.
4. Storage and Retention
Game data is cached in our database to improve performance. It is automatically updated when new analyses are performed. Recent searches are stored only in your browser's localStorage. They are never transmitted to our servers. You can delete them at any time by clearing your browser data. The language preference cookie (carried-locale) is a strictly necessary technical cookie, exempt from consent under the ePrivacy Directive.
5. Cookies and Trackers
Carried.io does not use any advertising cookies, third-party trackers, or analytics tools. The only cookie used is: • carried-locale: language preference (fr/en). Technical cookie, strictly necessary, duration 1 year. No third-party cookies are set. No data is shared with advertising networks or social media platforms.
6. Data Sharing
No data is sold, rented, or shared with third parties for commercial purposes. Game data displayed comes exclusively from the public Raider.IO and Warcraft Logs APIs. The site is hosted by Vercel Inc. (United States), which acts as a technical subprocessor.
7. International Transfers
Hosting is provided by Vercel Inc. (United States). Data transfers to the United States are governed by the EU-US Data Privacy Framework (DPF), to which Vercel adheres.
8. Your Rights
Although Carried.io does not process personal data in the strict sense, we respect GDPR principles. You have the following rights: • Right of access: know what game data is associated with your character • Right of rectification: report inaccurate data • Right of erasure: request removal of your character from our database • Right to object: object to the processing of your game data To exercise these rights, contact us at contact@carried.io with your character name and server. We will process your request within 30 days. You also have the right to lodge a complaint with your local data protection authority if you believe your rights are not being respected.
9. Security
We implement appropriate technical measures to protect processed data: HTTPS encryption, restricted database access, regular updates.
10. Changes
This privacy policy may be updated. The last modification date is shown at the bottom of this page. We encourage you to review it regularly.
Last updated: March 2026