🔒 Privacy Policy

1. Introduction

Welcome to the Cycling Event Tracker ("we," "our," or "us"). This Privacy Policy explains how we collect, use, and protect your information when you use our Progressive Web App (PWA) for tracking cycling challenges.

This application is designed to help cyclists track their progress against various cycling challenges using data from their Strava accounts. We are committed to protecting your privacy and being transparent about our data practices.

2. Information We Collect

Data from Strava

When you connect your Strava account, we access the following information through Strava's official API:

Locally Stored Data

We store the following information locally on your device using browser localStorage:

3. How We Use Your Information

We use the information we access for the following purposes:

1. Challenge Tracking: To calculate and display your progress against various cycling challenges
2. Performance Analysis: To show statistics and achievements based on your activity data
3. App Functionality: To provide core features like activity synchronization and progress visualization
4. Data Caching: To improve app performance by temporarily storing recent activities locally

4. Data Storage and Security

Local Storage Only

All application data is stored locally on your device using browser localStorage. This means:

• Data never leaves your device (except for API calls to Strava)
• You can clear all stored data by clearing your browser data or using the app's logout function
• Data is automatically cleared when you log out or disconnect your Strava account

Data Retention

We retain your data according to this schedule:

• Activity Cache: Up to 7 days, or until you clear cache manually
• Authentication Tokens: Until you log out or tokens expire (typically 6 hours)
• User Preferences: Indefinitely, until you clear browser data

5. Data Sharing and Third Parties

Strava API

We integrate with Strava's official API to access your activity data. This integration:

• Follows Strava's OAuth 2.0 authentication standards
• Only requests the minimum permissions needed for challenge tracking
• Does not share your data with any other third parties

No Data Collection by Us

We do not:

• Collect analytics or tracking data
• Use cookies for advertising or marketing
• Share your personal information with advertisers
• Sell or rent your data to third parties
• Transmit data to our own servers

6. Your Rights and Controls

You have full control over your data:

Data Access and Deletion

• View Data: All stored data is accessible through your browser's developer tools
• Clear Data: Use the "Logout" function to remove all stored tokens and cached data
• Browser Controls: Clear localStorage through your browser settings
• Strava Disconnect: Revoke app access through your Strava account settings

Strava Permissions

You can manage app permissions in your Strava account:

• Visit Strava Apps Settings
• Find "Cycling Event Tracker" in your connected apps
• Revoke access or modify permissions as needed

7. Cookies and Tracking

This application does not use cookies or any tracking technologies. The app functions entirely through:

• Browser localStorage for data persistence
• Service Worker for PWA functionality
• Direct API calls to Strava

8. Children's Privacy

This application is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by:

• Updating the "Last updated" date at the top of this policy
• Posting the updated policy on this page
• Notifying users through the app interface if significant changes occur

10. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact:

11. Compliance and Legal

This application complies with:

• Strava's API Terms of Service
• General Data Protection Regulation (GDPR) where applicable
• California Consumer Privacy Act (CCPA) where applicable
• Browser security standards and best practices

By using this application, you acknowledge that you have read and understood this Privacy Policy.