Privacy Policy

Last updated: 2026-10-12

This policy covers the FastECU NextGen account and billing system at this site (registration, login, plans, and the license key used by the FastECU NextGen desktop app). It is operated by MakerShop, business ID 2773224-4, registered at Ihastjärventie 40 B, 50970 Mikkeli, Finland ("we", "us"). Contact us at info@fastecu.fi for any question about this policy or your data.

What we collect

Account information: your email address, an optional username, and a hashed (never plaintext) password.
Billing information: when you subscribe to a paid plan, Stripe handles your payment details directly - we never see or store your card number. We store your Stripe customer/subscription id, plan, billing interval, and renewal date so we can show your account status.
License key: a license key lets the FastECU NextGen desktop app check your subscription status without a full login. The app periodically sends us the key itself so we can tell it your current plan and status - nothing else about your computer or your use of the app is sent alongside it.
Technical data: IP addresses are processed briefly to rate-limit abuse (login attempts, password resets, etc.) and are not used for tracking. A session cookie keeps you logged in to this site.
Sign-up attempt records: to tell real sign-ups from automated ones, each attempt to create an account (including attempts that fail, are blocked, or are caught by a hidden anti-bot form field that humans never see) is recorded with its time, outcome, IP address, browser/app identifier (User-Agent), and the email address and username that were submitted. These records are used only to detect and prevent abuse, and are deleted automatically after 30 days.
Definition request files: if you use the "Request definition work" feature on the ROM Database page to commission custom reverse engineering, the ROM file you upload there, and the email address you submit it with, are received and stored on this server so we can do the work - see the exception below.

What we deliberately don't collect

FastECU NextGen reads and writes vehicle ECUs directly, over a cable connected between your computer and your vehicle. Your ROM files, calibration data, vehicle identifiers, and datalogging sessions never pass through this account/billing server - they stay entirely on your own computer. We have no visibility into, and no way to collect, what vehicles or calibrations you actually work with.

The one deliberate exception is the "Request definition work" feature described above: a ROM file you choose to upload there is received and stored on this server, specifically so it can be reverse-engineered - unlike every other use of the Software, which never sends us a ROM.

How we use your data

To create and secure your account (authentication, password resets, email verification). Submitting a definition-work request without an existing account automatically creates one under the email you provide, so you can log in later to track the request and download the finished file, including its future updates - you'll get an email to set a password for it.
To do the reverse-engineering work you paid for through the "Request definition work" feature, and to send you the finished definition and any updates to it.
To process payments and manage subscriptions, via Stripe.
To tell the FastECU NextGen app your current plan and subscription status.
To send you transactional email (verification links, password resets, billing notices) - never marketing email without your separate consent.
To detect and prevent abuse (rate limiting, detecting automated sign-ups, fraud prevention).

Who we share it with

We use a small number of processors to run this service: Stripe for payment processing, and the email provider configured to send this site's transactional email. We do not sell your data, and we do not share it with anyone for advertising purposes.

How long we keep it

We keep your account data for as long as your account exists. Rate-limit records expire automatically within a short, fixed window, and sign-up attempt records are deleted automatically after 30 days. Deleting your account removes your account record.

Your rights

If you're in the EU/EEA (or another jurisdiction with similar protections), you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us at info@fastecu.fi to exercise any of these rights.

Cookies

We use one essential, httpOnly session cookie to keep you logged in. We don't use advertising or third-party analytics/tracking cookies.

Security

Passwords are hashed, never stored in plain text. Session and license-key tokens are stored as hashes, not the raw value shown to you. We recommend always accessing this site over HTTPS.

Children's privacy

This service is not directed at, and we do not knowingly collect data from, children under 16.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

Contact

Questions about this policy: info@fastecu.fi.