Privacy policy.

When you sign in with Strava or Google we store the name, avatar and email of that account, plus the tokens needed to sync your rides. Tokens are stored encrypted.

Your rides are used to work out which squares you have visited and on which days. We keep the resulting squares per season; ride data is only used for that computation.

We log a few product events in our own database (a matchup was created, an invite was accepted, the leaderboard was opened) to see which features get used.

Your name, avatar and square counts are visible to the people you race: your 1-on-1 rivals and the members of clubs you join. Joining a club or a matchup is always your explicit action.

The global leaderboard and public club pages only show you if you opted in on your settings page.

One session cookie keeps you signed in. It is strictly necessary and needs no consent.

We use Google Analytics 4 to count visits and see which pages get used. The Google tag is not loaded until you press Accept on the cookie bar; before that nothing is sent to Google and no analytics cookies exist. If you accept, Google sets the _ga and _ga_* cookies for up to 13 months.

Whether you accept or decline, your answer is kept in your browser's local storage under vt_consent so the bar doesn't ask on every visit. It holds nothing but that one word. Change your mind by clearing this site's data in your browser, and the bar will ask again.

No advertising, no cross-site tracking, no data is sold.

Veloturf runs on servers in the European Union. Strava and Google process your data under their own policies when you sign in or sync. Google Analytics data, if you accept it, is processed by Google.

Settings has a delete-account button. It removes your account, tokens, squares and product events immediately. You can also revoke Veloturf from your Strava or Google account settings, after which we can no longer sync.