Download integrity
Official release artifacts are served from this website. SHA-256 checksums are shown on the download page so installers can be verified before running.
Get-FileHash -Algorithm SHA256 .\RangeFinderStudio-Setup.exeAdmin access
Private maintenance routes require authentication, secure HttpOnly sessions, password hashing, and optional authenticator-code verification. Admin links are not exposed in the public website navigation.
Privacy-first operational metrics
Public visits, downloads, and update checks are counted as aggregate daily metrics. Raw IP addresses and raw user-agent strings are not stored for those public counters.
Article 32 technical and organisational measures
The site operator applies the measures below to protect personal data, as required by Art. 32 GDPR. The list is not exhaustive and is updated as the service evolves.
- HTTPS-only delivery with HSTS at the reverse proxy.
- Signed release artifacts with published SHA-256 checksums.
- HttpOnly, SameSite, and Secure flags on the admin session cookie.
- Password hashing with a memory-hard algorithm and optional TOTP for administrators.
- Least-privilege Postgres role for the application; no shared admin credentials.
- On-premise hosting at a Hokuyo office in Germany; physical access restricted to authorized staff.
- Encrypted off-site backups with TBD: backup retention period.
- Reverse-proxy access logs are retained for 14 days for incident investigation, then deleted.
- Internal record of processing activities maintained per Art. 30 GDPR.
Report a security issue
Email suspected vulnerabilities, suspicious downloads, or integrity concerns to kristou@hokuyo-aut.jp. Include the affected URL, app version, operating system, and reproduction details when possible.