Privacy Policy

Effective October 5, 2026

Strider is a personal half-marathon training tracker. Access is limited to people the owner has invited by email. This policy explains what information Strider handles and why.

Information Strider collects

When you sign in with Google

Strider receives your name, email address and profile picture from Google. It uses your email only to check whether you have been invited and what you are allowed to do (edit or view), and shows your name and picture in the app. This information is kept in an encrypted session cookie in your browser; Strider does not store your Google profile in its database.

Training data

The training plan and anything editors enter — workouts, distances, whether a run was completed, and notes — are stored in Strider’s database and visible to everyone with access to the app.

Google Calendar (optional)

If an editor chooses to connect Google Calendar, Strider asks Google for permission to:

• see the list of calendars in the account, so you can choose which one to use; and
• create, update and delete events, so it can add an all-day event for each run and keep it in sync.

Strider stores, encrypted, the refresh token Google provides, along with the email of the Google account that granted access and the name and ID of the calendar you chose. It only ever creates, changes or deletes the run events it created itself. It does not read, change or delete any other events, and it does not access any other Google data.

How information is used and shared

Information is used only to provide Strider’s features. Strider has no ads, does not sell data, and does not share it with anyone except the services needed to run the app: Google (sign-in and Calendar), Vercel (hosting) and Neon (database).

Strider’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not used for advertising, is not transferred to others except as needed to provide the features above, and is not read by humans except with your permission, for security purposes, or where required by law.

Security

Strider is served over HTTPS, only invited emails can sign in, view-only users cannot change anything, and Google Calendar tokens are encrypted at rest.

Your choices and deletion

• Disconnect Google Calendar at any time from the app (sidebar → Google Calendar → Disconnect). This revokes Strider’s access, deletes the stored token, and can also remove the events Strider created.
• You can also remove Strider’s access from your Google Account at myaccount.google.com/permissions.
• To have your access or any training data removed, contact the site owner.

Changes

If this policy changes, the effective date above will be updated.

Contact

Questions about this policy: the site owner.