Privacy Policy

• Account details. When you register with email and password, I store your email, an optional display name, and a securely hashed password (never the plain password). If you sign in with Google, I receive your name, email address, and profile image from Google.
• Your progress. The routes you mark completed (including optional distance, elevation, duration, and notes you add), your achievement-badge progress, and your unit preference (km/mi).
• Strava connection (optional). If you connect Strava, I store access tokens (encrypted) and import your Zwift ride activities, name, date, distance, elevation, duration, and the segments matched, to log completions for you. You can disconnect at any time, which revokes my access and removes any pending imports.
• Technical data. A single essential cookie to keep you signed in, and standard server logs (e.g. IP address, request time) kept briefly for security and reliability.

Analytics. I use Google Analytics to collect aggregated, non-identifying usage statistics (for example page views, approximate region, and device type) to understand how the site is used and improve it. I do not use advertising, and I never sell your data. Analytics runs only if you accept it in the cookie banner, you can change your choice anytime via “Cookie settings” in the footer.

I use your data solely to provide the service: to create and secure your account, authenticate you, and store and display your tracking progress. I do not sell your data or share it for marketing.

You can choose to share a summary of your stats via a secret link. When you turn this on, anyone who has the link can view a read-only summary of your totals (such as distance, elevation, routes completed, and streaks), but not your email or account details. The page is not indexed by search engines, and the link is long and unguessable. Sharing is off by default. You can turn it off, or generate a new link, at any time from your stats page; turning it off or regenerating immediately disables the old link.

I rely on a few trusted providers to run the service:

• Vercel, application hosting.
• Supabase, database where your account and progress are stored.
• Google, only if you choose to sign in with it, for authentication.
• Google Analytics, aggregated, non-identifying usage analytics.
• Strava, only if you connect it, to import your ride activities.
• Buy Me a Coffee, only if you choose to donate; payment is handled entirely on their site, and I never receive your card details.

Route and badge information and images are sourced from Zwift Insider with permission; this is reference content and does not involve your personal data.

• You can delete individual completions at any time (and restore them from your activity page).
• You can permanently delete your entire account and all associated data from the data deletion page (or by contacting me). This removes your account, completions, and badge progress, including any Google login link and Strava connection.
• You can disconnect Strava at any time from your dashboard; this revokes my access and deletes any pending imports.
• You may change your name, email, and unit preference from within the app.

Questions about your data? Email bertelsenm@duck.com. See also my Terms of Service.