Privacy

Last updated September 30, 2026.

What we store

• Your Strava name and profile photo URL.
• The Strava access and refresh tokens used to read your activities.
• A summary of each outdoor activity from the last 30 days: name, sport type, start time and location, distance, duration, heart rate, the place name we looked up for it, and its air quality readings.
• A random session identifier that keeps you logged in (a cookie).

Who else sees what

• OpenStreetMap: to name the place where an activity started, we send the start point, rounded to about 100 m, to OpenStreetMap's Nominatim service. Nothing else about you or the activity is sent.
• Google Analytics: we use Google Analytics to count visits and see which pages are used. It sets cookies and sends Google information such as the pages you view, your browser and device, and your approximate location. It doesn't receive your Strava data. You can block it with a browser extension or Google's opt-out add-on.
• Vercel Web Analytics: our host, Vercel, also counts page views. It doesn't use cookies. It records the page, the site you came from, and your country, browser and device type, but not who you are, and it doesn't receive your Strava data.
• Strava: under its API agreement, Strava may collect information about how CIGINT uses the Strava API, and may use it for its own purposes.
• Air quality data: we download public files from Environment and Climate Change Canada. Nothing about you is sent to them.

What we don't do

We never see your Strava password, and we don't sell your data or use it for advertising. Your Strava data is only shown to you.

Deleting your data

Use Disconnect Strava and delete my data on the Account page. It revokes access on Strava and permanently deletes everything listed under "What we store". You can also revoke CIGINT any time from Strava's settings under My Apps.