Privacy Policy
Questa pagina non è ancora disponibile nella tua lingua, quindi viene mostrata la versione inglese. Fa fede la versione in cinese tradizionale.
AeroPacer turns a course, the race-day weather and your own numbers into a bike power plan. This policy explains what we collect, why, who we hand it to, and how you get it back or delete it. It is written plainly because we would like you to actually finish reading it.
What we collect
Things you give us
- Account: your email. If you register with a password, we store a scrypt hash of it. We cannot see or recover your original password. If you sign in with Google, we receive only your email address and the account identifier Google issues.
- Rider parameters: FTP, weight, height, bike weight, riding position, surface and gearing. These are the inputs to the power calculation.
- Files you upload: course GPX files and ride FIT files. We keep the original FIT compressed so that when the algorithm improves we can re-estimate your past CdA without asking you to upload everything again.
- Athlete profiles created with a coach plan: if you keep athletes on a coach plan, their names and parameters are covered by this policy too.
Things the system produces
- Your power plans, CdA history and confidence bands, and share links.
- Payment status: your Stripe customer ID, which plan you bought, and when it renews. Card numbers never touch our servers; Stripe handles them.
- Server logs and a short-lived IP counter used to block brute-force logins. The counter lives in memory only and disappears when the server restarts.
What we do not collect: advertising identifiers, contacts, or location permissions. There is no Google Analytics on this site and no third-party advertising or analytics cookies.
Cookies
| Name | Purpose | Lifetime |
|---|---|---|
bp_session |
Keeps you signed in | 90 days |
bp_oauth |
One-time anti-forgery token during Google sign-in | 10 minutes |
lang, langpick |
Remembers the language you chose | 1 year |
All of them are strictly necessary to run the site and none are used for tracking, which is why we do not show a consent banner.
When you sign in with Google
We request only the openid and email scopes. In other words, we receive your email address and an account identifier, and nothing else. We cannot read your Gmail, Drive, Contacts, Calendar or Photos.
Data received from Google is used solely to create and identify your AeroPacer account. We do not sell it, do not use it for advertising or to build advertising profiles, and do not pass it to third parties beyond the service providers listed below or where the law requires it. This is consistent with the Google API Services User Data Policy, including its Limited Use requirements.
Who we share data with
Only what a provider needs to make the service work:
| Who | What they get | Why |
|---|---|---|
| fly.io (servers in Tokyo) | All stored data | Hosting and database |
| Stripe | Email and purchase records; card details go straight to Stripe | Payments |
| The sign-in exchange, if you choose Google sign-in | Account login | |
| MET Norway, Visual Crossing | Course coordinates and dates | Race-day weather. No personal data is sent |
| OpenFreeMap, Google Fonts | Your IP address, because your browser fetches tiles and fonts directly | Maps and typefaces |
We do not sell personal data and we do not share it for cross-site advertising.
How long we keep it, and how to delete it
Your data stays while your account exists. You can:
- Delete individual items on the site: plans, routes and CdA records.
- Email support@aeropacer.com to delete your whole account. We will remove the account, rider parameters, plans, CdA records and stored original files within 30 days.
- Payment and tax records that we are legally required to keep (held by Stripe) fall outside that deletion.
Your rights
You may ask to see, correct or delete your data, or to receive a copy of it. Users in the EU and the UK also have rights under the GDPR, including restriction, objection and data portability. Email support@aeropacer.com. We will not ask you to justify the request.
Children
AeroPacer is not aimed at people under 16 and we do not knowingly collect their data.
Changes to this policy
We will update the date at the top of this page when it changes. For substantive changes, such as a new purpose for your data, we will also email signed-up users.
Contact
For anything privacy-related, write to support@aeropacer.com.