Privacy policy

ridingding helps cyclists find group rides and join them. This page says what we keep about you, why, who else handles it, and what you can do about it. ridingding is run by Adrien Lestang.

What we keep

Your account: your email address, your password (stored scrambled — nobody can read it), your first and last name.
If you give them: your home town (with its country) and your gender. Both are optional, and nobody but you sees them.
Your photo, if you add one.
Your rides: the rides you join, cancel or mark with a heart, and the rides you host.
Your choices: whether other riders see your name on a ride, and whether you have a public rider page.
For organisers: the organisation's name, address, contact details, logo, cover photo and team.
Routes: the GPX an organiser adds, cleaned up. We keep the line and its altitudes, never the original file — no heart rate, no recorded times.

What we don't keep

Your location. When you search around you, your phone's position is used for that search and not stored. The places you looked at last stay on your phone only.

No analytics, no advertising trackers. The website only sets the cookies that keep you signed in.

Why

To run the service you asked for: show you rides (around your home town, if you set one), hold your place on a ride, let organisers know who's coming, and send the emails that go with it (sign-in, reminders for rides you marked, messages about your organisation). We never sell your data, and we don't use it to advertise.

The newsletter is separate: you get it only if you subscribe, and every issue has a link to stop.

Who sees what

Organisers see the full name of the riders who joined their rides.
Riders signed in to ridingding see the full name of who has joined a ride — unless you hide your name.
Anyone sees your public rider page, if you turned it on, with the rides you chose to show.

Who handles it for us

A few companies run parts of ridingding. They handle your data only to do that job:

Supabase — the database and sign-in. Data is stored in Australia (Sydney).
Cloudflare — hosting the website and the app's server, and storing photos.
Elastic Email — sending emails.
MapTiler — the maps and place search. It receives what you search for and the map areas you look at.

How long

As long as you have an account. When you delete it, your account, photo, registrations and the private rides you host are deleted straight away. Rides hosted by an organisation stay with the organisation.

Your rights

You can see and change your details in the app, hide your name, turn your public page off, and delete your account at any time from Profile › Privacy. For a copy of your data, a correction, or any question, write to hello@ridingding.com.

Depending on where you live — Thailand's PDPA, the European GDPR — you may also complain to your data protection authority.

Changes

When this policy changes in substance, the date at the top changes, and we tell you in the app before it applies.