» Privacy and cookies Hi, guest! Log in | Sign up   A A ET EN

Privacy and cookies

This policy explains what personal data CarRating.eu collects, why, and what your rights are under the EU General Data Protection Regulation (GDPR).

Who is responsible

The data controller is MRN Services OÜ (registry code 14444657). Contact: kontakt@carrating.eu.

What we collect and why

  • Account data: username, e-mail address and password (stored only as a one-way hash). Needed to create and secure your account. Legal basis: performance of a contract (the terms of use).
  • Content you publish: cars, photos, build diary, profile text, an Instagram account link if you choose to add one, ratings and comments. This content is public and shown under your username. Legal basis: performance of a contract.
  • Sign-in with Google or Facebook: if you choose it, we receive your e-mail address and an account identifier from that service, nothing else. We do not receive your password, friends or posts.
  • Reports: if you report a car as inappropriate, we store the report with your username. Only administrators see it.
  • E-mails: we use your address for account confirmation, password reset and messages about your account (for example a moderation notice). When someone comments on or rates your car, we send you a short notice; you can turn this off in Settings. We do not send advertising.
  • Security data: to stop password guessing and spam we count attempts per IP address. The address is stored only as an irreversible hash and deleted within about a day. The hosting provider also keeps standard server logs. Legal basis: legitimate interest in keeping the site secure.
  • Visit statistics: we count page views ourselves, including which site you came from (for example Facebook or Google), device type, browser language and time zone. Visitors are told apart by a hash that changes every day; no IP address or cookie is used for this and you cannot be identified from it. We keep this data for 13 months. Legal basis: legitimate interest in improving the site.

We do not sell your data, build advertising profiles or use third-party analytics trackers.

Cookies

The site uses only cookies that are necessary for it to work, so no consent is required:

  • crsid: keeps you signed in and protects forms; deleted when you close the browser.
  • lang: remembers your language choice for one year; set only when you pick a language.
  • size: remembers the page size you chose on a computer for one year; set only when you pick a size.

Your browser also remembers locally that you have seen the cookie notice. If advertising is added to the site in the future, this policy will be updated and consent will be asked where the law requires it.

Who receives the data

The data is stored on the servers of our hosting provider in the European Union. If you sign in with Google or Facebook, that service learns that you use CarRating.eu. We disclose data to authorities only when the law obliges us to.

How long we keep it

We keep your data for as long as you have an account. When you delete your account, your profile, cars, photos, diary, ratings and comments are deleted immediately and permanently. Backups, if any, are overwritten within 30 days. Accounts whose e-mail address is not confirmed within 48 hours are deleted automatically.

Deleting your data

You can delete your account and all data linked to it yourself at any time: log in, open Settings and choose "Delete my account". Everything is removed immediately. If you signed in with Facebook or Google, you can also remove CarRating.eu from that service's settings (for Facebook: Settings > Apps and websites). If you cannot log in, write to kontakt@carrating.eu from the e-mail address of your account and we will delete the account within 30 days.

Your rights

  • Access and portability: download all your data on the Settings page.
  • Rectification: edit your profile, cars and diary yourself at any time.
  • Erasure: delete your account on the Settings page.
  • Objection and restriction: write to kontakt@carrating.eu. We reply within one month.
  • Complaint: you may complain to the Estonian Data Protection Inspectorate (www.aki.ee) or to the authority of your country.

Age

You must be at least 13 years old to create an account.

Last updated: 13.11.2026