Privacy & data protection

Privacy policy

This policy explains how FD Customs handles personal data when you visit the HyperLap website, create an account or use a HyperLap license.

Last updated: 20 August 2026

1. Who is responsible for your data?

FD Customs is the controller responsible for personal data connected with the HyperLap website, account system and licensing services. HyperLap is the product and brand developed by FD Customs.

Privacy and data-protection questions can be sent to support@fd-customs.nl.

Before commercial launch: add the registered business address and Chamber of Commerce number of FD Customs to this section.

2. Personal data we process

The data we process depends on which parts of HyperLap you use. This may include:

  • Account data: name, email address, password hash, account creation date and session information.
  • Authentication data: hashed remember-me tokens, password-reset tokens and expiry information.
  • License data: license type, status, issue date, expiry date where applicable and the last four characters of the key. Full license keys are stored as cryptographic hashes rather than readable text.
  • Device activation data: a protected device identifier, device name, activation time, last validation time and deactivation time. HyperLap stores a keyed hash of the device identifier rather than the original identifier.
  • Support communications: your email address and information you provide when contacting FD Customs.
  • Technical data: IP address, request time, browser or client information and security/error logs generated by the hosting environment or license API.
  • Order and payment data: if paid checkout is introduced, the chosen plan, order reference, payment status, amount and information required for invoicing and accounting. FD Customs will not store full payment-card or online-banking credentials.

3. Why we use personal data

We process personal data for the following purposes and legal bases:

  • Performance of a contract: to create and manage your account, provide a license, activate one computer, validate entitlement, provide downloads and deliver support.
  • Legitimate interests: to secure HyperLap, prevent misuse and unauthorized activations, diagnose technical problems and improve reliability. We consider the impact on your privacy when relying on these interests.
  • Legal obligations: to maintain required tax, payment and business records and respond to lawful requests.
  • Consent: where permission is required, for example for non-essential cookies or optional marketing. Consent may be withdrawn at any time without affecting earlier lawful processing.

HyperLap does not sell personal data or use it for unrelated third-party advertising.

4. HyperLap desktop application

HyperLap is still under active development. The current public website and license system do not by themselves receive simulator telemetry, microphone recordings or voice transcripts.

Pre-release desktop builds may process race telemetry, race context, push-to-talk voice input and generated engineer responses to provide the requested race-engineer functionality. Processing can occur on the user's computer and, depending on the build and selected features, through external speech or AI services.

Before a production desktop release, this policy will be updated with the final telemetry and voice categories, processing locations, service providers, international transfer safeguards, retention periods and available controls. Testers should use the privacy information supplied with their specific build.

Do not include sensitive personal information in voice requests or support messages when it is not necessary for using HyperLap.

5. Service providers and data sharing

We share personal data only where necessary to operate HyperLap, comply with the law or protect the service. Recipients may include:

  • Cloud86: website, server, email and database hosting infrastructure.
  • Mollie: payment processing once checkout is enabled. Mollie processes payment information under its own privacy statement and payment obligations.
  • Professional advisers and authorities: where reasonably required for accounting, legal compliance, disputes or a valid legal request.
  • Future application providers: speech, AI or other technical providers used by a production desktop build. These will be documented before commercial release.

Where a provider acts as a processor for FD Customs, appropriate contractual and security arrangements will be used. If personal data is transferred outside the European Economic Area, an applicable legal transfer mechanism will be used where required.

6. How long we keep data

  • Account data is generally kept while the account remains active. After account deletion, data not needed for another lawful purpose is deleted or anonymised.
  • License and activation records are kept while the license is active and for a reasonable period afterwards where needed for support, fraud prevention, refunds or disputes.
  • Password-reset data is temporary and becomes unusable after its expiry time.
  • Support messages are kept only as long as reasonably necessary to handle the request and related follow-up.
  • Security and server logs are retained as reasonably necessary to investigate incidents and maintain security, subject to hosting configuration and backup cycles.
  • Once payments are enabled, financial administration records may be retained for seven years or another period required by applicable tax law.

Data may remain temporarily in secured backups until the applicable backup cycle expires. We do not keep personal data longer than necessary unless a longer period is legally required.

7. Security

FD Customs uses safeguards appropriate to the service, including encrypted HTTPS connections, password hashing, prepared database statements, restricted administrator access, CSRF protection, hashed license keys and protected device identifiers.

No internet service is completely risk-free. If you believe your HyperLap account or personal data may have been compromised, contact support@fd-customs.nl promptly.

8. Cookies and local storage

The website uses essential cookies for login sessions, account security and optional remember-me functionality. These cookies are necessary to provide the requested features.

HyperLap currently does not state that it uses advertising or non-essential analytics cookies. If those technologies are added, this policy and consent controls will be updated before they are enabled where consent is required.

9. Your privacy rights

Depending on the circumstances and applicable law, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • receive certain data in a portable format;
  • withdraw consent where processing relies on consent; and
  • lodge a complaint with a data-protection authority.

In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens.

We may request reasonable information to verify your identity. Some data cannot be deleted immediately where retention is legally required or necessary for legal claims.

10. Children

HyperLap is not intentionally directed at children below the age at which they may independently consent to online services under applicable law. Contact us if you believe a child provided personal data without the required permission.

11. Changes to this policy

This policy may be updated when the website, licensing system, payment flow or desktop application changes. Material changes will be communicated through an appropriate channel. The date at the top shows when this version was last updated.

12. Contact

For questions, requests or complaints about personal data, contact:

FD Customs — HyperLap
Email: support@fd-customs.nl
Website: https://fd-customs.nl/