Terms and Conditions

Last updated: 31-05-2026

These Terms and Conditions ("Terms") govern your use of XDFPorter (the "Service"), operated by XDFPorter ("we," "us"). By uploading a file or otherwise using the Service, you agree to these Terms. If you do not agree, do not use the Service.

1. The Service

The Service is a tool for processing automotive ECU calibration files, including extracting ROM binaries and map definitions from project files, converting between file formats, identifying software versions, and related operations. The Service is provided on an anonymous basis; no account is required.

2. Acceptable Use

You agree that you will only upload files that you own or are authorized to process. You agree not to:

• use the Service for any unlawful purpose, or to process files you have no right to;
• upload malicious files, or attempt to disrupt, overload, or circumvent the Service's rate limits or capacity controls;
• use automated means to access the Service in a manner that places an unreasonable load on it;
• attempt to gain unauthorized access to the Service, its infrastructure, or other users' data.

We may restrict, rate-limit, or block access to protect the Service, without notice.

3. No Warranty

The Service is provided "as is" and "as available," without warranties of any kind, express or implied. ECU calibration carries inherent risk. Modifying engine control software can damage vehicles, affect emissions compliance and roadworthiness, and may be illegal for road use in your jurisdiction. You are solely responsible for how you use any output from the Service. We do not warrant that outputs are accurate, complete, or fit for any particular purpose. In particular, extracted definitions and scaling are produced heuristically and may contain errors, so you must verify them before relying on them.

4. Limitation of Liability

To the fullest extent permitted by law, we shall not be liable for any indirect, incidental, or consequential damages, nor for any damage to vehicles, equipment, or data, arising from your use of the Service or any output produced by it.

5. Changes to the Service and Terms

We may modify or discontinue the Service, or update these Terms, at any time. Continued use after changes constitutes acceptance of the updated Terms.

6. Governing Law

These Terms are governed by the laws of Luxembourg, without regard to conflict-of-law principles.

7. Contact

Questions about these Terms can be directed to our contact address: (hover to reveal)

Privacy

Last updated: 31-05-2026

This section explains what data the Service collects and why. We aim to collect as little as possible.

What information we collect

A device fingerprint hash

When you submit a processing job, your browser computes a hash from characteristics of your browser and device (such as browser version, screen size, time zone, and rendering characteristics) and sends only that hash, not the underlying details. We log this hash together with your IP address. We use it solely to detect and prevent abuse (for example, one device cycling through many IP addresses to evade limits). This hash is retained for 30 days and then automatically deleted. It is not used to identify you personally or to track you across other websites.

IP address and activity logs

We log your IP address and basic event information (which operation, timestamps, whether a limit was hit) to operate rate limiting, protect the Service from abuse, and diagnose problems. This information is retained for 30 days and then automatically deleted.

Uploaded and derived files

When you process a file, the Service stores the uploaded file and the files it generates.

What we do not do

• We do not require accounts and do not ask for personal details.
• We do not sell or share your data with third parties for marketing.
• We do not use the device fingerprint for advertising or cross-site tracking.

Legal basis (GDPR)

We process the limited data above on the basis of our legitimate interest in operating and protecting the Service.

Your rights

If you are in the EU/EEA, you have rights to access, correct, or request deletion of your personal data, and to object to processing. Because the Service is anonymous and data is keyed to technical identifiers, we may be unable to locate data relating to a specific person, but we will respond to legitimate requests where feasible. To exercise these rights, use our contact address: (hover to reveal)

Data location and security

Data is stored on servers located in Germany. We take reasonable measures to protect it, but no system is perfectly secure.

Contact

For privacy questions or requests, use our contact address: (hover to reveal)