Privacy Policy
Last updated: 31 August 2026
Starter draft — not legal advice. This is a plain-language starting point written for a solo operator. Review it (ideally with a professional) and adapt it before relying on it.
Who is responsible
This service (“PackerHub”, at app.ecuhax.com) is operated by Janis, a solo operator based in
Latvia (European Union). For any privacy question or request, contact
janis@ecuhax.com.
What we collect, and why
We practise data minimisation: we ask for as little as possible.
- Your email address — to create and secure your account, verify it’s really you, let you log in, and send you account and job notifications (and, later, deliver files you request).
- Your password — stored only as a salted cryptographic hash. We never see or store your actual password.
- Files you upload (original ECU binary files) and files we derive from them — used solely to perform the processing you asked for.
- Job metadata — filename, timestamps, status, and the technical parameters of each job — so we can run your jobs and show them in your dashboard.
- Minimal server logs, including your IP address — kept briefly for security, abuse prevention, and debugging.
We deliberately do not collect your name, postal address, phone number, or any advertising or marketing profile.
How long we keep it
- Uploaded and processed files: automatically deleted a short time after processing — 72 hours (this automatic deletion arrives with the paid-download feature). Please download your files promptly.
- Account data (email, password hash, job metadata): kept until you delete your account.
- Security logs: kept only briefly, then rotated and discarded.
Your rights
Under the GDPR you can access, correct, export, restrict, or object to the processing of your data, and ask us to delete it. You can delete your account and its data yourself at any time from your account settings. To request an export of your data, email janis@ecuhax.com. You also have the right to complain to your data protection authority (in Latvia, the Data State Inspectorate / Datu valsts inspekcija).
Who we share it with
We do not sell your data and we do not share it with third parties for their own purposes. The service runs on our own server hosted within the European Union (Hetzner), and account emails are sent through our email provider. When paid processing is introduced, a payment provider (for example PayPal) will handle your payment and receive only what is needed to process it, under their own privacy policy — we never receive your full card details.
Cookies
We use only strictly necessary cookies: a session cookie to keep you logged in and a security (CSRF) cookie. No analytics, tracking, or advertising cookies.
Security
Traffic is encrypted with TLS, uploaded files are stored with restricted permissions, and downloads are served only through authenticated links.
Changes
We may update this policy; the “last updated” date above will change. Questions? Email janis@ecuhax.com.