Privacy Policy

Introduction

Virtual Vertical ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our application that integrates with Strava.

Information We Collect

Data from Strava

When you connect your Strava account, we collect:

• Athlete ID: Your unique Strava athlete identifier
• Activity Data: Elevation gain, activity type, activity name, and activity dates
• Profile Information: Name and profile picture (for your own account display only)

Analytics Data

If you consent to analytics cookies, we use Google Analytics to collect:

• Page views and navigation patterns
• Time spent on pages
• Device and browser information
• General geographic location (country/city level)

This data is anonymized and aggregated. We do not collect personally identifiable information through Google Analytics.

Data We Store

We store the following information in our database:

• Strava athlete ID
• OAuth access tokens and refresh tokens (encrypted)
• Mountain climbing records (which mountains you've climbed)
• User preferences (auto-sync settings)
• Badge achievements

How We Use Your Information

We use your information to:

• Match your activity elevation gain to mountains in our database
• Update your Strava activity descriptions with mountain information
• Display your climbed mountains on your profile
• Award badges and achievements

Data Sharing

• We do not sell your data to third parties
• We do not share your personal information with other users or third parties
• We do not display or disclose your Strava data to other users - all your data is private and only visible to you
• We respect Strava's privacy requirements and do not share any Strava user data, even if it is publicly viewable on the Strava platform

Your Rights and Controls

You have control over your data:

• Disable auto-sync: You can disable automatic processing of new activities
• Manual activity selection: You can choose which activities to process
• Disconnect: You can disconnect your Strava account at any time

Data Security

We implement appropriate technical and organizational measures to protect your data:

• OAuth tokens are stored securely
• Database access is restricted
• We use HTTPS for all data transmission

Data Retention

We retain your data as long as your account is active. If you disconnect your Strava account, we will delete your personal data within 30 days, except where we are required to retain it by law.

Third-Party Services

• Strava: We integrate with Strava's API. Your use of Strava is also subject to Strava's Privacy Policy: https://www.strava.com/legal/privacy
• Google Analytics: We use Google Analytics to understand how visitors use our website. Google Analytics uses cookies to collect information such as how often users visit our site, what pages they visit, and what other sites they used prior to coming to our site. We use this information to improve our service. Google's ability to use and share information collected by Google Analytics about your visits to this site is restricted by the Google Privacy Policy and Terms of Service. You can opt-out of Google Analytics by rejecting analytics cookies in our cookie consent banner.
• Hosting: Our application is hosted on Cloudways. Data is stored in secure databases.

Children's Privacy

Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: hans@naerdetalvor.no

Your Consent

By using Virtual Vertical and connecting your Strava account, you consent to this Privacy Policy.