Privacy Policy

Last updated: January 2025

What Data We Collect

When you connect your Strava account, we collect and store:

  • Account information: Your Strava athlete ID, username, and profile picture URL
  • Authentication tokens: OAuth access and refresh tokens to access your Strava data
  • Activity data: Activity name, type, date, distance, duration, elevation, and GPS route (polyline)
  • Derived data: H3 hexagonal grid cells calculated from your activity GPS coordinates

How We Use Your Data

Your data is used to:

  • Display your visited areas on a hexagonal grid map
  • Calculate statistics about your activities and exploration
  • Show your position on public leaderboards (only if you enable a public profile)
  • Sync new activities from Strava via webhooks

We do not sell, license, or share your data with third parties.

Data Storage and Security

  • Your data is stored in a SQLite database on our server
  • All data transmission uses HTTPS encryption
  • OAuth tokens are stored securely and used only to communicate with Strava's API
  • We do not store your Strava password

Public Profile

By default, your profile is private. If you enable a public profile in settings:

  • Your username, avatar, cell count, and activity statistics become visible to others
  • Your visited grid cells and activity timeline are publicly accessible
  • You appear on the public leaderboard

You can disable your public profile at any time in settings.

Data Retention

We retain your data for as long as your account is connected. Activity data is cached and synced periodically from Strava.

Your Rights

You have the right to:

  • Access: View all data we have stored about you
  • Withdraw consent: Disconnect your Strava account at any time by logging out
  • Delete: Request deletion of all your data by revoking access in your Strava settings

When you revoke access via Strava or request deletion, we will remove your data within 48 hours.

Strava API

This application uses the Strava API but is not endorsed or certified by Strava. Your use of Strava data is also subject to Strava's Privacy Policy.

Contact

For questions about this privacy policy or to request data deletion, please contact the site administrator.