Privacy Policy

Last updated: June 21, 2026

Overview

Inktivity ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services ("Service").

1. Information We Collect

1.1 Information You Provide

Account Information

When you register, we collect your email address and optionally your display name. We do not require your real name.

Strava Data

When you connect your Strava account through OAuth, we access:

• Strava profile information
• Athlete ID
• Username
• Public activity data, including:
  • Activity type
  • Distance
  • Duration
  • Elevation
  • Activity date

We request the minimum scopes required by Strava:

• read_all
• profile:read_all

Subscription Information

Payments are processed by Creem. We never store your credit card details and only receive subscription status information.

1.2 Automatically Collected Information

Session Data

We use a secure session cookie (sessionToken) to maintain your login state.

Analytics

We use Google Analytics to understand website usage. Information collected may include:

• Pages visited
• Browser type
• Device information
• Approximate geographic location

Google may use cookies for this purpose.

Server Logs

For security and debugging purposes, our servers temporarily record:

• IP address
• Request time
• User agent

These logs are not used for advertising.

2. How We Use Your Information

We use your information:

• To provide dashboards, widgets, and e-ink display data.
• To authenticate your account.
• To send service-related notifications.
• To improve the Service using aggregated and anonymized statistics.

We do not use your activity data for advertising purposes.

We do not sell your personal information.

3. Data Storage and Retention

Strava Activity Data

Synced activities are stored to provide:

• Historical views
• Faster widget rendering

Activity data remains available while your Strava connection is active.

Account Data

Your account information is retained until account deletion.

Widget Tokens

Unique widget tokens are generated for widget embedding and revoked when Strava is disconnected.

Data Deletion

You may request deletion of your account and associated data at any time.

4. Third-Party Services

We only share information necessary to provide the Service.

Strava

Used for activity synchronization.

Creem

Used for payment processing.

Google Analytics

Used for anonymous usage analysis.

Legal Requirements

Information may be disclosed if required by law.

5. Cookies

Essential Cookie

sessionToken

Maintains login sessions.

Analytics Cookies

_ga, _ga_*

Used by Google Analytics.

Preference Storage

inktivity-lang

Stores language preferences.

Additional cookies may be used by third-party services required for analytics and payment processing.

6. Data Security

We implement industry-standard security measures including:

• HTTPS encryption
• Secure session management
• OAuth 2.0 authentication
• Encrypted storage of Strava access tokens

No system can guarantee absolute security.

7. Your Rights

You may:

• Access your data
• Correct account information
• Export your data
• Delete your account
• Disconnect Strava at any time
• Withdraw consent

Disconnecting Strava stops all future activity synchronization.

8. Children's Privacy

The Service is intended for users aged 16 and older.

We do not knowingly collect information from children.

9. International Data Transfers

Our servers are located in the United States.

By using the Service, you consent to international transfer and processing of your information.

10. Changes to this Policy

We may update this Privacy Policy from time to time.

Material changes may be announced through:

• Email
• Website notices

Continued use of the Service constitutes acceptance of the updated Policy.

11. Contact

For privacy-related requests or questions:

Email: service@inktivity.top