Privacy

Who is responsible

PENDING: the operator's legal name, registered address and tax identifier go here. Until they do, this page is not publishable.

For anything on this page, write to [email protected].

What we hold, and why

Your account. An email address, and the identifier your provider returns if you sign in with Google or GitHub. Never a password we chose for you: sign-in is handled by Better Auth against our own database.

The firmware you upload. It is a private working file. It is never published, never listed, and never offered for download to anyone but you.

What we learned from it. Hashes, the partition map, the list of images and settings, and the platform it belongs to. These are measurements, not the binary, and they are what makes the compatibility catalogue possible.

Your edits and your builds. The settings you changed, the images you uploaded, and the verification report of each build.

What you tell us afterwards. Whether an install worked, and whether a distributor answered you.

The legal basis for each

Running the service — your account, your projects and your builds. Performance of the contract you entered when you registered.

Keeping it standing up — abuse prevention, rate limits and the audit log. Legitimate interest, and the balancing test is short: a service that accepts 130 MB binaries without defences does not stay online.

Advertising — consent, and nothing loads before you give it.

Keeping an unsupported firmware for research — consent, asked for separately at the moment it is refused, unticked by default, and revocable. Revoking it deletes the binary immediately.

How long

Uploaded firmware: 30 days, renewed while you are working on the project. Then it is deleted.

Downloads: 30 days from the build.

What we learned from a firmware: kept. It contains no part of the binary and it is what tells the next person whether their unit is supported.

Your account: until you delete it. Deleting it removes your projects and your builds.

Who else touches it

Railway — hosting for the application and the database, in the European Union.

Cloudflare R2 — object storage for firmware and builds. A private bucket with no public URL: access is by signed link, valid for minutes.

Cloudflare Turnstile — tells a person from a script on registration, upload and theme publication. It runs invisibly and Cloudflare processes signals from your browser to do it. Cloudflare's Turnstile Privacy Addendum governs that processing and forms part of this policy.

Google — advertising, and only after you have agreed to it. Until then the tags run in denied-by-default consent mode and set nothing.

Google and GitHub — only if you choose to sign in with them.

What you can ask for

Access, rectification, erasure, restriction, portability and objection. Write to [email protected] and we will answer within a month.

If you are not satisfied you may complain to the Spanish Data Protection Agency (AEPD, www.aepd.es), or to the authority of the country you live in.

What we never do

We never publish your firmware. We never list it. We never sell anything to anybody. And we never supply a manufacturer's firmware to a third party — if you need your original back, the download you already have carries it.