Privacy policy

Controller

Raul Rodríguez Algaba, tax ID 33959085E, Carrer Bonavista, 10, 1r 2a, 08551 Tona (Barcelona), Spain. Email: hola@carnoria.com.

What data we process and why

• Browsing. The website is served by Cloudflare, which processes technical data (IP address, browser) to deliver the pages and protect them from attacks. We do not use analytics or advertising cookies.
• Your account. Keeping projects in the cloud requires an Instal Studio account (the same one for every app in the suite). We store your email, name, company, region and type of business (those you give us), your encrypted password (if you choose one), your open sessions (a technical session cookie and the browser type, while the session is open) and your subscriptions. To protect the account, the IP address of sign-in attempts and email codes is kept for no more than 24 hours. To prevent abuse we may ask for a Cloudflare Turnstile check. A licence signed with your email and plans is stored in your browser.
• Your projects. They are saved in your browser’s local storage. If you have an account and leave “Keep my projects in the cloud” on, they are also stored on our server (Cloudflare) so you have them on all your devices. You can turn it off or delete your projects at any time.
• Contact. If you write to us, we use your email and message to reply.
• Waiting list. If you leave your email so we can tell you when Carnoria opens, we use it only for that notice and delete it afterwards or when you ask us to.
• App usage. We count anonymously how often the app is opened and some features are used. No cookies, no identifiers and no personal data.

Legal basis

Performance of the contract (account and cloud projects), your consent (waiting list), our legitimate interest in keeping the service secure and improving it (anonymous usage count) and compliance with legal obligations.

Local storage

The application uses the browser’s local storage to keep your projects, preferences and licence. It is strictly necessary for the service you request and does not require consent (article 22.2 LSSI). You can clear it from your browser settings.

Retention

Your account and cloud projects are kept while you have the account; projects you delete are purged after 30 days. The waiting-list email is deleted after the notice or when you ask.

Recipients and transfers

Cloudflare (hosting and security) may process data outside the European Economic Area, with the safeguards of the EU-US Data Privacy Framework or standard contractual clauses. We do not share data with third parties for other purposes.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@carnoria.com. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Last updated: 28 October 2026