Privacy Policy

• Account details. When you register with email and password, we store your email, an optional display name, and a securely hashed password (never the plain password). If you sign in with Google, we receive your name, email address, and profile image from Google.
• Your progress. The routes you mark completed (including optional distance, elevation, duration, and notes you add), your achievement-badge progress, and your unit preference (km/mi).
• Strava connection (optional). If you connect Strava, we store access tokens (encrypted) and import your Zwift ride activities — name, date, distance, elevation, duration, and the segments matched — to log completions for you. You can disconnect at any time, which revokes our access and removes any pending imports.
• Technical data. A single essential cookie to keep you signed in, and standard server logs (e.g. IP address, request time) kept briefly for security and reliability.

Analytics. We use Google Analytics to collect aggregated, non-identifying usage statistics (for example page views, approximate region, and device type) to understand how the site is used and improve it. We do not use advertising, and we never sell your data. Analytics runs only if you accept it in the cookie banner — you can change your choice anytime via “Cookie settings” in the footer.

We use your data solely to provide the service: to create and secure your account, authenticate you, and store and display your tracking progress. We do not sell your data or share it for marketing.

We rely on a few trusted providers to run the service:

• Vercel — application hosting.
• Supabase — database where your account and progress are stored.
• Google — only if you choose to sign in with it, for authentication.
• Google Analytics — aggregated, non-identifying usage analytics.
• Strava — only if you connect it, to import your ride activities.
• Buy Me a Coffee — only if you choose to donate; payment is handled entirely on their site, and we never receive your card details.

Route and badge information and images are sourced from Zwift Insider with permission; this is reference content and does not involve your personal data.

• You can delete individual completions at any time (and restore them from your activity page).
• You can permanently delete your entire account and all associated data from the data deletion page (or by contacting us). This removes your account, completions, and badge progress, including any Google login link and Strava connection.
• You can disconnect Strava at any time from your dashboard; this revokes our access and deletes any pending imports.
• You may change your name, email, and unit preference from within the app.

Questions about your data? Email bertelsenm@duck.com. See also our Terms of Service.