Privacy policy

The short version

When you convert, unlock or inspect a file, it is sent to our servers over an encrypted connection, processed, and the result is returned to you. We do not keep your tune file after the job is finished. The only personal data we hold is what you give us when you buy a subscription or a tune.

What happens to a file you convert

Converting or inspecting a tune file happens on our server. The file is sent to us over an encrypted (HTTPS) connection, processed, and the result is returned to you. Once the job is finished we do not keep your tune file.

For an ECU unlock the read is sent to us on a private channel (WhatsApp), and we delete it once the unlocked file has been delivered.

What the server stores

For a subscription we store the key we issued (as a one-way hash, never the key itself), the label you gave it, its expiry, the machine it is activated on, and when it was last used. Staff accounts additionally store an email address and a salted hash of the password, never the password itself.

Each download is recorded — which file, which account, and when — so that a purchase can be re-delivered to you and so that sharing of paid files can be traced. Ordinary web-server request logs kept by our host contain an IP address, a timestamp and a browser user-agent string, and are rotated on the host's schedule.

Payments

Card details are handled entirely by the payment provider and never reach hptbin's servers. We receive only the confirmation, the amount and the reference we need in order to grant your purchase.

Cookies

One cookie: the session cookie set when you sign in, so the next page knows it is you. It is HTTP-only, so page scripts cannot read it, and it carries nothing but an opaque session token.

There is no advertising cookie, no analytics cookie, no third-party tracker and no cross-site pixel anywhere on this site.

Who else sees your data

We do not sell, rent or trade personal data. It is shared only with the payment provider and the hosting provider that operate the service on our behalf, and where disclosure is required by law.

Retention and your choices

Account data is kept for as long as the account exists. Ask us to close your account and we delete the account record and your email address; payment and order records are kept only for as long as tax and accounting rules require.

To access, correct, export or delete your data, email us from the address the account was registered with and we will action it.

Children

hptbin is a tool for professional and enthusiast vehicle work and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes to this policy

If this policy changes in a way that matters, we update the date at the foot of this page. Continuing to use the service after that date means you accept the updated policy.