Privacy Policy · Unridden

1. Information We Collect

Account Information

When you create an account, we may collect:

Email address
Display name
Profile photo, if provided or imported
Account settings
Privacy preferences
Login and authentication information

Unridden uses email-based magic links for account access.

Strava and Third-Party Activity Data

If you connect your Strava account or another supported third-party service, we may collect information authorized by you through that service, including:

Strava user/account identifiers
Activity IDs
Activity type
GPS tracks and route geometry
Activity dates and times
Imported historical activities
New activities received through webhooks or API access
Access tokens, refresh tokens, and related authentication data needed to maintain the integration

We use this information to provide Unridden features, including trail matching, completion tracking, statistics, leaderboards, and challenge participation.

Location and Activity Data

Unridden may collect, process, and store location and activity data, including:

GPS tracks or ride paths
Trail, route, run, or lift matches
Completion records
Activity timestamps
Area and sub-area progress
Leaderboard results
Challenge participation and results

Location and activity data can be sensitive because it may reveal where you ride, ski, travel, live, work, or spend time. Please use privacy settings thoughtfully.

User Content

We may collect content you submit, including:

Trail edits
Closure reports
Trail names
Difficulty ratings
Area and sub-area suggestions
Ambassador edits
Comments, feedback, or support requests
Photos or other content, if supported in the future

Technical and Usage Information

We may collect technical information when you use the Service, including:

IP address
Browser type
Device type
Operating system
Referring pages
Pages viewed
App interactions
Log data
Error reports
Approximate location derived from IP address
Cookie and session information

Analytics Information

We may use analytics tools to understand how users interact with Unridden, improve the Service, diagnose issues, and evaluate feature usage.

We currently use essential cookies and analytics technologies. We do not currently use advertising pixels, retargeting pixels, or marketing cookies.

2. How We Use Information

We use information to:

Create and maintain your account
Authenticate you using magic links
Connect to Strava or other third-party services you authorize
Import and process activity data
Match your activities to trails, routes, runs, lifts, areas, and sub-areas
Track completion progress
Display statistics and leaderboards
Administer challenges, prizes, sponsorships, donations, and merchandise-related features
Provide ambassador and area administration tools
Process trail closure reports and edits
Improve, debug, secure, and operate the Service
Communicate with you about your account, support requests, updates, and Service-related matters
Prevent cheating, abuse, fraud, and misuse
Comply with legal obligations and third-party platform requirements

3. Public and Shared Information

Depending on your account settings and use of the Service, Unridden may display certain information to other users or the public, including:

Display name
Profile photo
Ambassador badge
Completion percentage
Trails, routes, runs, lifts, or areas completed
Number of times a trail has been completed
Area and sub-area progress
Leaderboard placement
Completion times
Challenge participation
Activity-derived statistics

If your account is marked private, Unridden will limit the display of your identifying information where supported. For example, you may appear as an anonymous or de-identified entry on leaderboards, and other users will not be able to view your detailed identifying profile information.

Private mode does not necessarily remove all aggregate, anonymous, or de-identified results from leaderboards, statistics, or challenge features.

4. Strava Data

If you connect Strava, Unridden will access and process Strava data only as authorized by you and as necessary to provide the Service.

We may store Strava access tokens and refresh tokens so that we can maintain the connection and receive authorized activity updates.

You may disconnect Strava where supported. Disconnecting Strava stops future access where technically available. However, unless required by applicable law, third-party platform terms, or unless you delete your Unridden account or request deletion, disconnecting Strava does not automatically delete data already imported into Unridden.

If you delete your Unridden account, we will delete your personal data associated with your account, including imported Strava-derived activity data, subject to reasonable technical limitations and any legal obligations.

5. Account Deletion and Data Retention

We generally retain account information, activity data, GPS data, completion history, leaderboard history, trail matches, user content, and related records for as long as your account remains active.

If you delete your account, we will delete your personal data associated with the account, subject to reasonable technical limitations, backup retention, legal obligations, security needs, dispute resolution, and enforcement of our Terms.

Some non-personal, aggregated, anonymized, or de-identified data may be retained after account deletion.

6. How We Share Information

We may share information in the following circumstances:

With Service Providers

We may share information with vendors and service providers that help us operate Unridden, such as:

Hosting providers
Database providers
Analytics providers
Error tracking providers
Email delivery providers
Payment processors
Map providers
Cloud storage providers
Security and infrastructure providers

These providers may process information only as needed to provide services to us and are not authorized to sell your personal information.

With Third-Party Services You Connect

If you connect Strava or another third-party service, information may be exchanged between Unridden and that service as necessary to provide the integration.

With Other Users or the Public

We may display information through public or semi-public features such as profiles, leaderboards, challenge pages, ambassador badges, area statistics, and completion results, subject to your privacy settings.

With Sponsors or Challenge Partners

If you participate in a sponsored challenge, prize, event, or promotion, we may share information reasonably necessary to administer that challenge, verify eligibility, deliver prizes, prevent fraud, or comply with applicable rules.

Specific challenge or prize rules may provide additional details.

For Legal, Safety, or Compliance Reasons

We may disclose information if we believe it is reasonably necessary to:

Comply with law, legal process, or governmental requests
Enforce our Terms
Protect the rights, property, or safety of Unridden, users, trail organizations, land managers, sponsors, or others
Investigate fraud, cheating, abuse, security issues, or illegal activity
Respond to disputes or claims

Business Transfers

If Unridden or Cobalt Edge LLC is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be transferred as part of that transaction, subject to this Privacy Policy.

7. We Do Not Sell Personal Information

We do not sell your data.

We do not sell your personal information.

We do not share your personal information for cross-context behavioral advertising.

We do not currently use advertising pixels, retargeting pixels, or marketing cookies.

If our practices change in the future, we will update this Privacy Policy and provide any notices or choices required by applicable law.

8. Cookies and Analytics

Unridden may use:

Essential cookies needed for login, sessions, security, and core functionality
Analytics cookies or similar technologies to understand usage and improve the Service

You may be able to control cookies through your browser settings. Disabling cookies may affect Service functionality.

9. Payments, Merchandise, and Donations

Unridden may offer merchandise, donations, paid features, sponsored prizes, or related transactions.

If payments are processed through a third-party payment processor, that processor may collect payment information directly. Unridden generally does not store full payment card details unless expressly stated.

Payment processors are governed by their own terms and privacy policies.

10. Security

We use reasonable administrative, technical, and organizational measures to protect information. However, no system is completely secure, and we cannot guarantee that information will never be accessed, disclosed, altered, or destroyed.

You are responsible for maintaining access to your email account and protecting your login links.

11. Children

Unridden is intended for users who are at least 13 years old.

We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to Unridden, please contact us at help@unridden.app, and we will take appropriate steps to delete the information.

12. Your Privacy Rights

Depending on where you live, you may have rights to:

Access personal information we have about you
Correct inaccurate information
Delete your personal information
Request a copy of your information
Object to or restrict certain processing
Withdraw consent where processing is based on consent
Appeal a privacy-rights decision, where required by law

You may exercise privacy rights by using available account tools or contacting us at help@unridden.app.

We may need to verify your identity before fulfilling certain requests.

13. California Privacy Notice

If you are a California resident, California law may provide additional rights regarding your personal information.

We do not sell personal information and do not share personal information for cross-context behavioral advertising.

Categories of personal information we may collect include:

Identifiers, such as email address, display name, account IDs, and third-party account identifiers
Internet or electronic network activity information, such as log data and usage data
Geolocation data, including GPS tracks and activity routes
Commercial information, if you purchase merchandise, donate, or participate in paid features
User-generated content and communications
Inferences related to completion statistics, preferences, and activity history

We use these categories for the purposes described in this Privacy Policy, including providing the Service, processing activities, maintaining leaderboards, administering challenges, improving features, securing the Service, and complying with legal obligations.

To exercise California privacy rights, contact us at help@unridden.app.

14. International Users

Unridden is currently focused on users in the United States and Canada, with plans to expand to Europe.

If you use Unridden outside the United States, you understand that your information may be processed in the United States or other countries where our service providers operate. Those countries may have privacy laws different from those in your location.

Where required, we will take steps designed to provide appropriate protections for international data transfers.

15. OpenStreetMap and Map Data

Unridden may use trail, map, or geographic data from OpenStreetMap and other third-party sources. Such data may be subject to separate licenses, attribution requirements, and third-party terms.

OpenStreetMap data may be incomplete, inaccurate, outdated, or inconsistent with local rules or conditions.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we may notify you through the Service, by email, or by updating the effective date above.

Your continued use of Unridden after the updated Privacy Policy becomes effective means you acknowledge the updated policy.

17. Contact

Questions or privacy requests may be sent to:

Cobalt Edge LLC

Email: help@unridden.app

Website: unridden.app