Privacy policy

Overview

Audax.ie is a personal, non-commercial project created for the Irish Audax cycling community. I am committed to protecting your privacy. This Privacy Policy explains how I collect, use, and safeguard your information when you use Audax.ie.

Strava integration

Audax.ie uses Strava OAuth 2.0 to sign you in. This provides a seamless login experience since most Audax cyclists already use Strava.

When you connect with Strava, I collect and store:

• Your Strava user ID (for authentication)
• Your display name
• Your profile picture URL
• OAuth tokens (encrypted and stored securely for maintaining your login session)

Optional: Strava activity import

If you choose to use the Strava Import feature, Audax.ie reads your Strava activities to help you find and import Audax rides. When you import an activity, I store the ride details (date, distance, name, elevation) and one or more Strava activity IDs for linking purposes (multiple activities can be grouped into a single ride). I do not store activities you choose not to import as rides in your tracker. Your selections and edits exist only in the current page and are discarded when you leave or reload it.

Route matching improvements

When route data is available, Audax.ie may compare an activity with a catalogue GPX route to improve Strava matching. I retain de-identified comparison results and, when you import the activity, your final matching choice. I do not retain route coordinates or identifiers linking these results to you. Unresolved comparisons are retained for 30 days and labelled comparisons for 18 months.

Brevet Hiberniae

The Brevet Hiberniae feature lets you track visits to landmarks across Ireland by uploading proof photos.

When you record a visit, I collect and store:

• The proof photo you upload, compressed and stored securely in cloud storage (AWS S3)
• The visit date (which may be extracted from the photo's EXIF metadata if available)
• Optional notes you add to the visit

EXIF metadata (such as the date the photo was taken) is read in your browser to pre-fill the visit date. Raw EXIF data is not stored on the server. The uploaded photo is compressed before storage and the original is not retained.

If you delete a visit, the associated photo is permanently removed from cloud storage. If you delete your account, all your photos and visit records are permanently deleted.

AI-generated award posters

If you choose to generate an award poster, the award and ride details selected in the composer are sent to OpenRouter and the configured image-generation provider so they can create the artwork and typography. This may include your display name, ride names, dates, distances, and elevation when you enable those options.

GPX files, route coordinates, and RideWithGPS URLs are not sent to the AI provider. Audax.ie adds the route map separately after the artwork is generated. Generated posters are stored privately and are available only to the account that created them.

Data I collect

In addition to the Strava authentication data mentioned above, I collect:

• Audax ride information that you enter manually or import from Strava (date, distance, type, location, etc.)
• Award progress and achievements you track on Audax.ie
• AI-generated award posters you choose to create
• Brevet Hiberniae visit records and proof photos you upload
• Session information for maintaining your login state

How I use your data

I use your information to:

• Authenticate you and maintain your login session
• Display your profile information
• Track your Audax rides and award progress
• Provide you with personalised statistics and achievements
• Create an AI award poster when you explicitly request one

Data security

I take data security seriously:

• All OAuth tokens are encrypted using AES-256-GCM encryption
• All connections use HTTPS/TLS encryption
• Session cookies are secure and HTTP-only
• Audax.ie follows industry best practices for data protection
• Uploaded photos are stored in encrypted cloud storage (AWS S3) and served over HTTPS

Your rights

You have the right to:

• Access your data at any time through your account
• Delete your account and all associated data
• Revoke Strava access at any time through your Strava settings
• Request a copy of your data

Data retention

I retain your data for as long as your account is active. If you delete your account, all your data is permanently deleted from Audax.ie, including any photos stored in cloud storage.

De-identified route comparisons follow the separate retention periods described in the Strava integration section above.

Third-party services

Audax.ie uses Strava for authentication and, if you choose to use the import feature, to read activities that help you import rides. It uses Amazon Web Services (AWS S3) to store uploaded and generated images. When you explicitly generate an award poster, it uses OpenRouter and the configured image-generation provider to process the details selected in the composer. I do not otherwise share your data with third-party services except as required by law.

Changes to this policy

I may update this Privacy Policy from time to time. I will post any changes on this page and update the date at the top.

Contact

If you have any questions about this Privacy Policy or how your data is handled, get in touch through the support page.