Privacy Policy
Last updated: May 2026
What this app does
RunChallenge is a private hobby project for a closed group of friends. It connects to Strava to import running activities and display them in a shared team leaderboard. You can also log runs manually.
No data is sold or used for advertising. There are no analytics tools and no tracking of any kind.
What data is stored
When you connect Strava
- Name and profile picture from your Strava profile
- Running activities: name, distance, date, duration, and route polyline
- OAuth access token and refresh token — used only for background sync
When you register with email
- Email address and password (hashed)
- Manually logged runs: distance, date, notes, optional photo
Cookies
Only one technically necessary session cookie is set (better-auth.session_token) to keep you logged in. It does not require consent as it is essential for the app to function.
No tracking. No advertising cookies. No cookie banner.
Disconnecting Strava
You can revoke access at any time:
- In the app under Settings → Disconnect Strava
- Directly via Strava at strava.com/settings/apps
When you disconnect, your stored OAuth tokens are deleted immediately. Previously imported activities are anonymized (Strava IDs and route data removed) but kept in the challenge record.
Your rights (GDPR)
You have the right to access, correct, delete, or restrict processing of your data. To make a request, contact us at the address in the Impressum.
Responsible party
See Impressum. This is a private, non-commercial hobby project pursuant to § 18 MStV (German Media State Treaty).