← ECUSBF

ECUSBF Privacy Policy

Privacy v1.0

Version 1.0 - 2026-03-17 (effective date)

1. Data controller

Data controller: robert niedzielski, contact: privacy@ecusbf.pl.

2. Nature of the platform

ECUSBF is a research-and-testing platform for evaluating algorithms based on mathematical rules, used to compare similar ECU BIN files and experimentally replicate changes between them. The project is developmental in nature and is also intended to gather feedback from practitioners to further improve the tool.

3. Scope of processed data

Email address, IP address, time of operations, email-verification status, technical and audit logs, and information about acceptance of documents may be processed.

4. Purposes of processing

Data may be processed to operate the platform, deliver the output link, verify the email address, ensure security, prevent abuse, maintain auditability, improve the platform and establish, exercise or defend claims.

5. Legal basis of processing

Data are processed mainly on the basis of legitimate interests connected with operation, security, abuse prevention, audit and further development of the project.

6. Whether data provision is mandatory

Providing an email address may be required where necessary for delivery of the download link or confirmation of the address used in the service flow.

7. Email confirmation

The platform may use an email-confirmation mechanism and may withhold the actual download link until confirmation is completed.

8. Email messages

Messages sent by the platform are technical and operational only, including address confirmation and download-link delivery.

9. Data recipients

Data may be disclosed to hosting, email and technical-security providers to the extent necessary for operation of the platform.

As a rule, we use infrastructure and services located in the European Economic Area or aimed at the European market. At the same time, selected payment and anti-abuse components may be provided by globally operating providers. In such cases, data may be transferred outside the EEA only to the extent necessary for operation of the service and subject to the safeguards required under data-protection law.

10. Retention period

Data are retained no longer than necessary for the purpose for which they were collected.

In particular, pending email-confirmation data are generally retained for the lifetime of the confirmation link, no longer than 24 hours from issuance; technical rate-limit counters may remain stored for up to 1 hour and up to 24 hours respectively.

Information about a confirmed email address may be retained for up to 120 days from confirmation, unless it loses its operational or security relevance earlier.

Working status data related to an active job are generally retained for about 1 hour from storage, unless the current technical configuration of the platform sets a different period.

Technical and audit logs are written to daily audit files and retained for as long as needed for security, accountability, diagnostics, platform-quality analysis and defence against claims; the detailed retention period may be updated as the platform's technical and organisational setup evolves.

11. User rights

Where provided by law, users may have the right to access, rectify, erase, restrict or object to processing and to lodge a complaint with a supervisory authority, including in Poland with the President of the Personal Data Protection Office.

12. Security

Technical and organisational measures are used to reduce the risk of unauthorised access, abuse, loss or misuse of data.

13. Cookies and similar technologies

The platform uses only cookies and similar technologies necessary for operation and security of the service.

14. Changes to the privacy policy

The Privacy Policy may be updated together with changes to platform functionality, legal requirements or security measures.