What data we collect
We collect only what we need to run the platform:
- Account data — name, email address, profile photo, and username when you sign up via Clerk (our authentication provider).
- Profile data — city, bio, and preferences you choose to add.
- Strava data — if you connect Strava, we store your Strava athlete ID and sync activity data you explicitly authorize.
- Participation data — which runs and clubs you join, referral codes, and badges earned.
- Guest participation — if you join a run as a guest, we collect your name and email for that run only.
- Newsletter — first name and email address when you subscribe via Brevo.
Why we collect it
- To create and manage your account.
- To let you discover, join, and organize runs and clubs.
- To show your public runner profile to the community.
- To send you the newsletter you subscribed to.
- To improve the platform based on aggregated, anonymous usage patterns.
We do not sell your data. We do not use your data for advertising.
Third-party services
We use a small number of trusted services:
- Clerk — authentication and session management. Processes your email, name, and profile photo.
- Supabase — our database, hosted in the EU. Stores all platform data.
- Vercel — hosting and serverless functions.
- Strava — optional OAuth connection for syncing your running activities. Only accessed with your explicit consent.
- Brevo — email newsletter delivery.
- Simple Analytics — privacy-friendly, cookieless website analytics. No personal data is collected or shared.
Cookies
We do not use tracking cookies. Simple Analytics is fully cookieless. Clerk uses essential session cookies required for authentication — these are not used for tracking.
How long we store data
We keep your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymous, aggregated data (e.g., run participation counts) may be retained indefinitely.
Newsletter subscriptions are retained until you unsubscribe. Guest participation data is kept for the duration of the associated run.
Your rights (GDPR)
Under the GDPR, you have the right to:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate data.
- Erasure — request deletion of your data.
- Portability — receive your data in a structured format.
- Object — object to processing of your data.
- Withdraw consent — at any time, without affecting prior processing.
To exercise any of these rights, email us at privacy@runclubs.nl. We will respond within 30 days. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes to this policy
We may update this policy from time to time. Material changes will be communicated via the platform or email. The “last updated” date at the top reflects the most recent revision.
