Privacy Policy

Last updated: April 27, 2026

Running Trees is a small, independent product made by Clay Moon Creative LLC that visualizes your Strava running history as a tree. We try to collect as little about you as possible. This page is a plain-English explanation of what we do and don't do with your data.

What we collect

When you purchase Running Trees and connect your Strava account, we store:

• Your email address — provided to Stripe at checkout, passed to us so we can identify your purchase if you lose your tree URL.
• Your Stripe checkout session ID — used to verify your purchase.
• Strava OAuth tokens — encrypted at rest. These let us fetch your activities on your behalf.
• Your Strava activity data — specifically: run dates, distances, pace, elevation gain, and activity names. We cache this for up to 6 hours so we don't make redundant requests to Strava.
• Your Strava athlete ID — used to associate activities with your account.

What we don't collect

• GPS routes or maps from your runs
• Heart rate, pace zones, or other health-related data
• Photos, comments, kudos, or social activity from Strava
• Your Strava friends, followers, or contacts
• Your IP address (beyond temporary server logs that auto-delete)
• Browser fingerprints or third-party tracking cookies

How we use your data

We use it for one thing: rendering your tree visualization to you. We do not sell, share, rent, or otherwise provide your data to third parties. We do not use your data to train AI or machine learning models.

Who can see your tree

Only you (and anyone with whom you share your unique tree URL). We do not display one user's data to any other user. There are no public galleries, leaderboards, or social features.

Service providers we use

• Stripe — processes your payment. Stripe receives your card details, never us. See stripe.com/privacy.
• Vercel — hosts the application. See vercel.com/legal/privacy-policy.
• Supabase — provides our database. See supabase.com/privacy.
• Strava — the source of your running data. See strava.com/legal/privacy.

Your rights

You can disconnect Running Trees from your Strava account at any time at strava.com/settings/apps. Doing so revokes our access immediately.

You can also email us to request deletion of all data we hold about you. We will delete it within 7 days and confirm by email.

Data security

Strava tokens are encrypted at rest using AES-256-GCM. All connections to our service use HTTPS. We never log raw tokens or full Strava API responses.

Children's privacy

Running Trees is not intended for use by anyone under 16. We do not knowingly collect data from children.

Changes to this policy

If we change this policy in any meaningful way, we'll update the "Last updated" date at the top and, where possible, notify users by email.

Contact

Running Trees is operated by Clay Moon Creative LLC. Questions or data requests? Email ClayMoonCreative@gmail.com.