Privacy

Who is responsible

PENDING: the operator's legal name, registered address and tax identifier go here. Until they do, this page is not publishable.

For anything on this page, write to [email protected].

What we hold, and why

Your account. An email address, and the identifier your provider returns if you sign in with Google or GitHub. Never a password we chose for you: sign-in is handled by Better Auth against our own database.

If you ask to join the beta. Your address and name, the screen, car and shop you told us about, and when you agreed to be written to. We keep them to decide on the request and to write to you about it. Every email about it carries a link that stops them without signing in.

The firmware you upload. It is a private working file. It is never published, never listed, and never offered for download to anyone but you.

What we learned from it. Hashes, the partition map, the list of images and settings, and the platform it belongs to. These are measurements, not the binary, and they are what makes the compatibility catalogue possible.

Your edits and your builds. The settings you changed, the images you uploaded, and the verification report of each build.

What you tell us afterwards. Whether an install worked, and whether a distributor answered you.

The legal basis for each

Running the service — your account, your projects and your builds. Performance of the contract you entered when you registered.

Keeping it standing up — abuse prevention, rate limits and the audit log. Legitimate interest, and the balancing test is short: a service that accepts 130 MB binaries without defences does not stay online.

Advertising — consent, and nothing loads before you give it.

Keeping an unsupported firmware for research — consent, asked for separately at the moment it is refused, unticked by default, and revocable. Revoking it deletes the binary immediately.

How long

Uploaded firmware: 30 days, renewed while you are working on the project. Then it is deleted.

Downloads: 30 days from the build.

What we learned from a firmware: kept. It contains no part of the binary and it is what tells the next person whether their unit is supported.

An account whose address was never confirmed: 7 days. Then it is deleted, with nothing kept. Until then nobody can sign in with it, and the message we sent to that address carries a button that deletes it straight away — for the case where somebody typed an address that was not theirs.

Your account: until you delete it. Deleting it removes your projects and your builds.

Who else touches it

Railway — hosting for the application and the database, in the European Union.

Cloudflare R2 — object storage for firmware and builds. A private bucket with no public URL: access is by signed link, valid for minutes.

Resend — delivers the two emails the site sends: confirm your address, and reset your password. They get your address and the message, and nothing else about you is in it.

Cloudflare Turnstile — tells a person from a script on registration, upload and theme publication. It runs invisibly and Cloudflare processes signals from your browser to do it. Cloudflare's Turnstile Privacy Addendum governs that processing and forms part of this policy.

Google — advertising, and only after you have agreed to it. Until then the tags run in denied-by-default consent mode and set nothing.

Google and GitHub — only if you choose to sign in with them.

What you can ask for

Access, rectification, erasure, restriction, portability and objection. Write to [email protected] and we will answer within a month.

If you are not satisfied you may complain to the Spanish Data Protection Agency (AEPD, www.aepd.es), or to the authority of the country you live in.

If somebody typed your address into our sign-up form and you have no account here, you do not have to write to us at all: the message you received carries a button that deletes that account, and it works without an account or a password. Nothing else is needed, and after seven days it goes on its own anyway.

What we never do

We never publish your firmware. We never list it. We never sell anything to anybody. And we never supply a manufacturer's firmware to a third party — if you need your original back, the download you already have carries it.