Privacy policy

1. Data controller

• Registered name: Pending publication
• Tax ID (NIF / CIF): Pending publication
• Registered address: Pending publication
• Contact email: hello@tracklab.es

The controller is responsible for the personal data collected through this website and the TrackLAB application.

2. Data we collect

• Account data: your name, email address and user role.
• Sporting activity data that you upload yourself (GPX files, metrics, saved routes).
• Technical data: device, browser, language and pseudonymised product usage events (these include session identifiers, whether you are signed in and your plan, so they are not anonymous data).
• Billing data if you subscribe to the PRO plan, handled by Stripe.

3. Shared routes

Routes you save are private by default: only you can see them. If you tap “share” on a route, that specific route becomes public: it gets its own address (tracklab.es/rutas/…) reachable by anyone without an account, it is included in the site map, and it may be crawled and indexed by search engines such as Google.

What a shared route shows is its name, its metrics, the track —including the GPS coordinates, which usually include the starting point— and the associated race strategy. Your name, your email and any other account data are not shown.

Sharing is always your action: no route is made public automatically when you save or analyse it. You can stop sharing a route at any time from “My routes”; it will stop being accessible, although search engines may take some time to remove it from their results.

4. Purpose and legal basis

We process your data to provide the service, improve the product, manage your subscription and send you operational communications. The legal basis is the performance of the contract and, where applicable, the consent you give for marketing communications.

5. Processors

We work with the following providers, all of which comply with the GDPR. We do not sell your data.

• Base44 — infrastructure, hosting and database.
• Stripe — payment processing and PRO plan billing.
• Resend — transactional email delivery.
• Sentry — application error and performance monitoring and, only if you give your consent, session replay with text masked and media content blocked.
• Map and elevation data providers.

7. International transfers

Some of our providers — in particular Stripe and Sentry — are US entities, so certain data may be processed outside the European Economic Area. Those transfers rely on the Standard Contractual Clauses approved by the European Commission (Implementing Decision (EU) 2021/914) and, where applicable, on the EU–US Data Privacy Framework, together with the supplementary technical and organisational measures agreed with each provider. You can ask us for a copy of these safeguards by writing to hello@tracklab.es.

8. Your rights

You may exercise your rights of access, rectification, erasure, restriction, portability and objection at any time by writing to hello@tracklab.es. You may also lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).

9. Retention

We keep your data for as long as your account remains active. If you delete it, we erase your personal data except where we are legally required to retain it.