mapBin

Privacy Policy

Last updated: 2026-10-20 · Operator: MapBin.app · Contact: support@mapbin.app

MapBin is an ECU calibration file editor. This policy explains what the service stores about you, why, who else can see it, and how to get it removed.

1. Who runs this service

MapBin at https://mapbin.app is operated by MapBin.app, the controller of the data described here. Questions, access requests and deletion requests go to support@mapbin.app.

The service runs on infrastructure the operator controls. It is not a multi-tenant cloud product: your data sits in the operator's own database and file storage.

2. What we collect, and why

Data	Why	Kept
Account — email address, display name, given/family name where the sign-in provider supplies them, language preference, and (for password accounts) a hash of your password. We never store the password itself.	To create and identify your account, and to contact you about it.	Until you ask us to delete the account.
Sign-in link — the provider name (Google, Discord, GitHub) and the account identifier that provider gives us.	So the same provider account signs you back into the same MapBin account.	Until you delete the account.
Files you upload — ECU binaries, definition files and datalogs, plus any saved versions and the names you give them.	The service cannot read or patch a file it does not have. Processing runs on the server, not in your browser.	Until you delete the file or the account.
Support conversations — messages you send us and any files you attach to them.	To answer you.	Until you delete the account.
Purchases — an order reference, your email, what was bought, and whether it was paid and delivered.	To deliver what you paid for and to support you afterwards.	As long as tax and accounting rules require.
ECU coverage statistics — the ECU family, variant and software number of files that get opened, whether the software recognised them, and which account opened them.	To see which ECUs need support work. It records what kind of ECU a file is, never its contents.	90 days, then deleted automatically.
Administrative audit log — which administrator changed an account, a credit balance or a system setting, and when.	Accountability for actions taken on your account.	Until deleted by an administrator.

Buying without an account

The standalone patch tools (multimap, flames, launch control) work without signing in. For those we keep the email address you give at checkout, the order reference, what was applied, and the uploaded file — the file only long enough to build and deliver your patch, after which it is purged automatically. The email is required so we can support a purchase that has no account behind it.

What we do not collect

• We do not read, decode or store vehicle odometer data. The tooling deliberately omits it.
• We do not sell personal data, and we do not use it for advertising or profiling.
• We do not build a behavioural profile of you across other websites.

3. Stored in your browser, not on our server

Some things stay on your own device and are never transmitted to us:

• Your sign-in token, in localStorage, so you stay signed in.
• An autosaved copy of the file you are working on, and a short list of recently opened files, in IndexedDB. This is what lets the editor offer your session back after a refresh or a crash.
• Interface preferences such as the theme.

Clearing your browser's site data for https://mapbin.app removes all of it.

4. Analytics

This build sends no analytics. There are no third-party trackers, no advertising pixels and no cross-site cookies on this site.

5. Who else sees your data

• Your sign-in provider (Google, Discord or GitHub), if you choose to use one. They tell us your email address, your name and an account identifier. They learn that you signed in to this service. We request no other access to your account and cannot read your mail, files or contacts.
• Stripe, for payments. Card details are entered on Stripe's own checkout and never reach our servers. Stripe tells us whether payment succeeded.
• Our email provider, to deliver order confirmations and support replies.

That is the complete list. We do not pass your data to anyone else unless the law compels us to.

6. Your rights

You can ask us to show you what we hold about you, correct it, export it, or delete it. Write to support@mapbin.app from the address on the account and we will act within 30 days.

Deleting your account removes your profile, your sign-in links, your uploaded files and your saved versions. Records we are legally required to retain — invoices, mainly — are kept for as long as the law says and for nothing else.

If you are in the EEA or the UK and think we have handled your data badly, you may complain to your national data protection authority.

7. Security

Traffic is encrypted in transit with HTTPS. Passwords are stored only as hashes. The API refuses requests from other websites and, apart from the public purchase tools, requires a valid session. No service can promise perfect security, but a breach affecting your data will be reported to you and to the relevant authority where the law requires it.

8. Children

This service is not intended for children under 16, and we do not knowingly collect their data.

9. Changes

If this policy changes materially we will update the date at the top and, where the change affects you, tell account holders by email.