Privacy Policy

Purpose and scope

DirtRacer is an Australian MTB event platform. Its current Strava submission path uses rider-authorised data only for a named, in-person event and only to calculate the connected rider’s private event result.

Information collected

• Rider name and Strava athlete identifier
• OAuth tokens and the scopes accepted by the rider
• Event entry, category and consent information
• Activity and segment-effort information needed for the event window
• Calculated private stage and event results
• Support, access, correction and deletion requests

How activity data is used

DirtRacer uses rider-authorised Strava activity data only to match the configured event stages and calculate that rider’s private event result. Data is not used to recreate Strava’s social network, activity feed or public leaderboard products.

Result visibility

DirtRacer does not publish public Strava-derived leaderboards and does not show one participant another participant’s Strava-derived result.

Multi-rider organiser result access, result exports and organiser distribution remain disabled unless Strava approves the exact controlled workflow in writing.

Data retention

Raw cached Strava payloads are automatically redacted after the applicable event retention window. When a rider deauthorises DirtRacer or submits a verified deletion request, DirtRacer removes the rider connection, tokens and related event data as required.

Activity deletion and relevant privacy-change webhook events cause affected cached effort and result records to be removed. DirtRacer does not retain a separate organiser archive of Strava-derived official results under the initial approval model.

What DirtRacer does not do

• Does not scrape Strava pages or public leaderboards
• Does not sell or license rider data
• Does not use Strava data for advertising or unrelated marketing
• Does not use Strava data for AI or machine-learning training
• Does not disclose Strava-derived data to unrelated third parties

Your choices and rights

• Disconnect DirtRacer through Strava account settings.
• Request a description or copy of information DirtRacer holds about your connection.
• Request correction of inaccurate support or entry information.
• Withdraw consent and request deletion of tokens, cached activity data and applicable derived event records.
• Receive written confirmation when a verified deletion request is completed.

Submit a request using the Strava data request form or email dirtracermtb@gmail.com.

Security

OAuth token exchanges occur server-side. Secrets are not intentionally exposed in public pages, screenshots or client-side code. Access to organiser administration is restricted, and Strava-derived multi-rider result access is disabled pending written approval.

Contact

Privacy and Strava-data enquiries: dirtracermtb@gmail.com

Strava relationship

DirtRacer is not affiliated with or endorsed by Strava. Additional detail is available on the Strava Data Use & Rider Privacy page.