Privacy Policy

Last updated: March 15, 2026

What PNW Runs Does

PNW Runs is a personal activity analytics dashboard that connects to your Strava account. It lets you explore your activities through proximity search, elevation rankings, segment effort tracking, geographic coverage maps, and custom activity grouping.

Data We Collect

When you connect your Strava account, we access the following data through the Strava API:

• Your public athlete profile (name, profile photo, city)
• Your activity data (activity names, dates, distances, routes, elevation, segments)

We do not access or store your Strava password. Authentication is handled entirely through Strava's OAuth 2.0 flow.

How We Store Your Data

• Session data is stored in a secure server-side database (AWS DynamoDB) and expires automatically after 7 days.
• Activity and segment caches are stored in AWS S3, keyed to your Strava athlete ID, and expire after 90 days of inactivity.
• Activity groups you create are stored in DynamoDB, linked to your athlete ID.

All data is encrypted in transit (HTTPS/TLS) and at rest (AWS managed encryption).

How We Use Your Data

Your data is used solely to power the features of this application. We do not:

• Sell or share your data with third parties
• Use your data for advertising
• Track you across other websites
• Send you emails or notifications

Data Retention

• Sessions expire after 7 days
• Cached activity data expires after 90 days
• Activity groups persist until you delete them

Deleting Your Data

You can sign out at any time, which clears your session. To revoke PNW Runs' access to your Strava data entirely, visit your Strava connected apps settings and remove PNW Runs. Cached data will be automatically deleted after 90 days, or you can contact us to request immediate deletion.

Third-Party Services

• Strava API — for activity data (Strava Privacy Policy)
• AWS — for hosting, storage, and compute
• OpenStreetMap — for map tiles

Contact

If you have questions about this privacy policy or want to request data deletion, reach out via the site owner's contact information on Strava.