Privacy policy

Who we are

everylane is run by Paul Farndon in Guernsey, who is responsible for your data (the data controller). Questions, requests and complaints go to paul@everylane.gg.

What we collect

• Your Strava account basics, when you sign in with Strava: your Strava athlete ID, first and last name and a link to your profile photo. Also the access keys Strava gives us to read your runs, which we store encrypted.
• Your runs in Guernsey. We read your Strava activity list and keep the runs that start in Guernsey: each one’s title, date, distance, time, GPS route (as a GPX file and a simplified copy) and a link back to it on Strava. Nothing else from your activities is kept.
• What we work out from your runs: which roads and junctions you have covered, your completion figures and milestones.
• Your settings: distance units, colour, target date and leaderboard visibility.
• Usage events: which screens you open and which tools you use, linked to your account. These are the only data we use to improve the app, and they are kept for 90 days.
• Technical data: error reports when something breaks, and server logs, both of which can include your IP address and browser type.

We use one cookie, which keeps you signed in. There are no advertising or tracking cookies. We never post to Strava, never sell your data, and never use it to train or run AI.

We count how often the front page is opened and how often its Connect button is tapped, as daily totals. A total is a date and a number. It holds nothing about you: no cookie, no IP address, no identifier.

Why, and on what basis

We use your Strava data only to show you your own coverage of Guernsey’s roads, which is the service you ask for when you connect. Usage events and error reports are kept because we have a legitimate interest in keeping the app working and making it better; you can object to that by emailing us.

Who can see it

Your runs, routes and dates are only ever shown to you. The one thing other runners see is your leaderboard entry: your completion percentage, streets completed and weekly change. By default it shows as an anonymous runner. Choosing Named (Settings › Leaderboard) adds your name, photo and a link to your Strava profile, and choosing Hidden takes you off other runners’ boards entirely. With only a few runners on the board an anonymous figure can be guessed, so Hidden is the choice that keeps your percentage to yourself.

Where it is kept, and who helps us

• Hetzner hosts the server, in Germany. Everything above lives there.
• Cloudflare R2 holds backups for 7 days. They are encrypted on our server before they leave it, so Cloudflare cannot read them.
• Sentry receives error reports, in its EU data region, and keeps them for up to 90 days. We do not attach your name or runs to them.
• CARTO supplies the map tiles. Your browser fetches them directly, so CARTO sees your IP address.
• Strava is where your data comes from. Profile photos load from Strava’s servers. Strava may collect information about how everylane uses its API, and Strava’s own handling of your data is governed by its privacy policy, which takes precedence over this one if they ever conflict.

How long we keep it

• Your account, runs and what we work out from them: until you delete your account or disconnect everylane from Strava.
• A run you delete on Strava: removed from everylane within a day.
• Usage events: 90 days.
• Backups: 7 days, so a deleted account is gone from every backup within a week, and restoring one can never bring it back.

Your rights

• Delete everything at any time from Settings › Delete my account & data. That erases your runs, routes, coverage, leaderboard entry and account, revokes our access to your Strava, and shows you a confirmation once it is done.
• Withdraw your consent by removing everylane in Strava’s own settings (My Apps). We then delete everything within a day.
• Get a copy of everything we hold about you, or ask us to correct it, restrict it or stop using it, by emailing paul@everylane.gg. We reply within a month.
• Complain to Guernsey’s data protection regulator, the Office of the Data Protection Authority, if you are unhappy with how we handle your data.

Everything else

everylane is not made or endorsed by Strava, and is not intended for children under 16. If this policy changes in a way that matters, we will say so in the app and update the date at the top.