Legal
Privacy policy
Effective October 21, 2026
The short version
- FRCShaper never sends your CAD models anywhere and never uses Onshape's API.
- With an account we keep your email, display name, a hash of your password, the settings you sync and your CAD usage stats.
- Friends and teammates see a small stats summary and your display name. They never see your email or document names.
- Guests send only an anonymous usage summary, with no names in it.
- No ads, no tracking cookies, no analytics, and we never sell data.
- You can delete your account and everything stored with it from the extension at any time.
Who we are
FRCShaper is a free Chrome extension for Onshape, made for FIRST® Robotics Competition teams, together with this website. "FRCShaper", "we" and "us" in this policy mean the people who make it. FRCShaper isn't affiliated with Onshape, PTC or FIRST. Questions about this policy: the support tab of FRCShaper's Chrome Web Store listing.
What the extension does in Onshape
The extension runs on onshape.com pages. It reads what you select and what is on the page (parts, edges, sketches, mates) inside your browser, so that it can offer and insert parts. That information stays in your browser. FRCShaper does not upload your models, sketches or document contents, and it does not call Onshape's REST API.
Once a day, part search checks whether the FRC parts library has a newer version. It does this through Onshape's own page, using the same requests Onshape's Insert dialog makes when you browse a library. Those requests go to Onshape under your Onshape sign-in, as if you had opened the dialog yourself.
What we collect
If you make an account
- Account details: your email (used to sign in and for friends to add you; it isn't verified and is never shown to friends or teammates), your display name, and for accounts made before email sign-in, a username. Your password is never stored: we keep only a salted scrypt hash of it.
- Sign-in sessions: each signed-in browser gets a random session token. We store only a SHA-256 hash of it, and it expires after 60 days or when you sign out.
- Failed sign-ins: a count of wrong passwords for each sign-in name typed, used to lock out guessing. It is deleted after a day without further attempts.
- Synced settings: your FRCShaper settings (theme, part and vendor choices, motor order and the like), so they follow you to other computers.
- CAD usage stats: how long you actively use Onshape, by day, hour and weekday; how long in Part Studios, Assemblies and Drawings; time per Onshape document, with the document's ID and name; counts of clicks, key presses, selections and undos; which FRCShaper rules you ran; and how many parts of each kind FRCShaper inserted. Time is counted only while an Onshape tab is focused and you're using the mouse or keyboard. The contents of what you type are never recorded. Stats are synced per browser under a random device ID.
- Friends: who you've added and who added you.
- Friends profile: a summary worked out from your stats: CAD time, active days, streaks, sessions, runs and parts by kind, and the last 30 days. It contains no document or rule names. Turn off "Friends and teammates can see my stats" in the extension to hide it.
- Teams: your team's name, its members and invites, and the part choices the team's owner shares with it.
If you use FRCShaper as a guest
Your settings and stats stay in your browser. The extension sends an anonymous usage summary (the same kind of summary as the friends profile, with no names of any kind) under a random ID, at most every ten minutes when it changes, and notes if that browser later signs in to an account. We use it to see how much FRCShaper is used.
On this website
- If you sign in on the My stats page, your session token is kept in this site's local storage until you sign out. The page reads your stats from our server to show them. It doesn't change anything.
- Your light or dark theme choice is kept in local storage.
- The site uses no cookies, ads or analytics. Our host, Vercel, keeps standard server logs (such as IP address and browser type) to run and protect the service.
What we don't collect
Your CAD geometry or document contents, your Onshape password or session, what you type, your browsing on other websites, or your location. FRCShaper has no ads and no third-party trackers, and we don't sell or rent data to anyone.
How we use it
- To sign you in, keep you signed in and protect accounts from password guessing.
- To sync your settings and stats between your browsers and show them on the Stats page and this website.
- To run Friends and Teams.
- To understand, in total, how FRCShaper is used, and to fix problems and prevent abuse.
Our use of information received through the Chrome extension follows the Chrome Web Store User Data Policy, including its Limited Use requirements.
Who can see it
- You see everything in your account from the extension and this website.
- Friends and teammates see your display name and, unless you turn sharing off, your friends profile. Never your email, settings, document names or per-document stats.
- FRCShaper administrators (a small number of accounts that run the service) can see an account list with emails and display names, sign-up and last-active times, signed-in browser counts, friendships, friends profiles and guest summaries. The admin page doesn't show your synced settings or per-document stats.
- Service providers that store or carry the data for us: Convex (our database and server) and Vercel (this website's host).
- We may disclose information if the law requires it.
The ReCalc calculator
FRCShaper's calculator window shows reca.lc, a separate website. It loads only when you open the calculator, straight from reca.lc, under reca.lc's own privacy practices.
Stored in your browser
The extension keeps your settings, stats, sign-in and calculator window position in Chrome's extension storage. It also caches what parts look like (for previews) in IndexedDB and a few learned details about parts in onshape.com's local storage. Removing the extension deletes its extension storage. Signing out removes your session and other devices' synced stats from that browser.
Keeping and deleting data
- Account data is kept while you have an account.
- Delete account (extension → Settings → Account) deletes your account, sessions, friendships, friends profile, synced settings, team membership and invites, and your synced stats. If you own a team, it passes to the member who joined first.
- Sessions end after 60 days, when you sign out, or when you change your password (which signs out your other browsers).
- Guest summaries contain nothing that identifies you and are kept to count usage over time.
- Stats are kept for up to 20 browsers per account. A new one replaces the browser that synced longest ago.
Security
All traffic to our server uses HTTPS. Passwords are hashed with scrypt and a random salt, session tokens are stored only as hashes, and repeated wrong passwords lock that sign-in for a while. No system is perfectly secure, so please use a password you don't use anywhere else.
Children
FRCShaper is made for high-school robotics teams and isn't directed to children under 13. If you're under 13, please don't make an account. If you believe a child under 13 has made one, contact us and we'll delete it.
Changes
If we change this policy we'll update this page and the date at the top.
Contact
Questions or requests about your data: the support tab of FRCShaper's Chrome Web Store listing.