Privacy Policy

Overview

Running Art ("we," "us," or "our") operates a service that lets you create custom printed posters from your activity data. This policy describes how we collect, use, and share personal information in connection with our website, checkout, and fulfillment.

Information we collect

• Account and contact: name, email address, and similar details you provide when you order or contact us.
• Order and fulfillment: billing and shipping address, order contents (e.g., poster options), and transaction records. Payment card data is processed by our payment provider; we do not store full card numbers on our servers.
• Content for your print: files or connected data you submit (such as activity files or linked third-party activity data) used solely to generate and produce your custom order.
• Technical data: IP address, device and browser type, and cookies used to operate the site and remember preferences (for example Strava sign-in).

Analytics and performance

We use Vercel Web Analytics on our hosting provider (Vercel) to collect aggregated page views, referrers, and coarse device or country information. We use Vercel Speed Insights to measure real-user performance (Core Web Vitals such as load speed and layout stability). These tools are designed to minimize personal identification; see Vercel's analytics documentation.

We also record a small number of custom product events (for example that a route was loaded, an item was added to the cart, or checkout was started). These events do not include your activity file contents, GPS tracks, Strava activity IDs, gift codes, or email addresses.

We do not sell your personal information.

How we use information

We use the information above to:

• Process payments, produce your custom items, and ship your order
• Provide customer support and respond to requests
• Detect fraud, abuse, and security issues
• Improve our product and comply with legal obligations

Sharing

We share information with service providers who help us run the business—for example payment processors, print or manufacturing partners, shipping carriers, and hosting or email providers. They may only use your information as instructed by us. We may also disclose information if required by law or to protect our rights and users.

Strava integration

Connecting Strava is optional. If you connect, we use Strava only to show your recent runs and to fetch the route or activity data needed to build your poster preview and fulfill your order. We do not sell Strava-derived personal data or your Strava activity content to third parties for their own marketing, advertising, or data-brokerage purposes.

Strava sign-in uses OAuth. Session tokens are stored in a secure, HTTP-only browser cookie so our servers can call Strava on your behalf while you use the site. We use that access only to provide this service (and through the same kinds of subprocessors described under Sharing, such as hosting), consistent with Strava's requirements.

Strava may collect and use data related to your use of the Strava API (for example usage telemetry) as described in the Strava API Agreement and Strava's policies.

You can disconnect Strava at any time using the disconnect control in our app, or by revoking Running Art from your Strava account settings. Disconnecting in our app revokes the integration on Strava's side as well as clearing your session here. If you revoke access in Strava, Strava notifies us through a deauthorization webhook; we then end the session on our side and do not continue to use your Strava tokens or data for that connection. For how Strava handles your data, see Strava's Privacy Policy.

Retention

We keep information as long as needed to fulfill orders, meet legal and accounting requirements, and resolve disputes. Content you upload for production may be deleted or anonymized after production and any applicable warranty period, unless we must retain it longer for legal reasons.

Your choices

Depending on where you live, you may have rights to access, correct, or delete certain personal information, or to opt out of some processing. To make a request, contact us using the information on our Contact page. We may need to verify your identity before responding.

Children

Our service is not directed to children under 13, and we do not knowingly collect their personal information.

Changes

We may update this policy from time to time. We will post the revised version on this page and update the "Last updated" date.