Privacy Policy

Who's behind athl.link

athl.link is a hobby project run by Martin Everest, a private person in Spain, who is responsible for your data. For anything about your data, write to [email protected].

What we collect and why

• Your account: your email address, handle and name. We need them to run your account and send you login links.
• Your page: your photo, bio, place, links, races, goals, results, stories, race reviews, best times, sponsors, clubs and coaches. Your page is public, that's what athl.link is for. Goals, results and stories each have their own switch if you want to keep them private.
• Signing in with Google: Google gives us your email address, name and profile photo, nothing else. We never see your Google password.
• Staying logged in: when you logged in and from which browser, to keep you logged in and to spot strange logins.
• Emails: we send login links, and the emails you choose in Settings (like the one the day after a race).
• Your location: only if you tap "Use my location". Your browser tells us roughly where you are, we look up the nearest city to show races and clubs nearby, and your browser remembers that city. We don't store your location.
• Reports: if you report something, we get what you wrote and your email address, so we can answer you.
• Technical data: your IP address and browser, used to protect the site against attacks and abuse.

On what grounds

• Running your account and your page: it's the service you signed up for (Art. 6(1)(b) GDPR).
• Security, and keeping race and club info correct: our legitimate interest in a safe, working site (Art. 6(1)(f) GDPR). You can object any time.
• Optional emails: you choose them in Settings and can switch them off any time.

Services that handle your data

We never sell your data or share it for advertising. It only passes through these services, which help us run athl.link:

• Hetzner (Germany): our servers and database.
• Cloudflare (USA, servers worldwide): protects the site and delivers it fast. It sees your IP address.
• Mailjet (France): sends our emails, so it sees your email address.
• OpenFreeMap: the maps on race and profile pages load from its servers, which see your IP address.
• Google (USA): only if you sign in with Google, or fill in our feedback form (a Google Form), in which case Google gets your answers.
• Apps you connect: if you connect ChatGPT or Claude to your page (Settings → Apps), they get what you allow. You can disconnect them any time.

Where data goes to the USA, it's protected by the EU-US Data Privacy Framework or the EU's standard contractual clauses.

Cookies

Only what the site needs to work, no advertising or tracking cookies:

• Session: one encrypted cookie that keeps you logged in (up to 60 days) and protects your account from other websites.
• Language and time zone: so pages show in your language and dates in your time. Kept for a year.
• Nearby races: the city you picked or found with "Use my location", to show races near you. Kept for a year.
• Light or dark mode: your choice, saved in your browser.

How long we keep it

• Your account and page: until you delete your account. Then it's all gone right away: your page, races, photo and share images. Copies in caches disappear within 30 days.
• Login links: they stop working after 60 minutes.
• Reports: as long as we need to handle them.
• Races you added stay in the race directory for everyone, without your name.

Your rights

• See and take your data: email us and we'll send you everything we have about you, as a file, within a month. Nobody has asked yet, so there's no download button. If more people ask, we'll build one.
• Correct it: change anything on your page yourself, or ask us.
• Delete it: delete your account any time in Settings.
• Object or limit: tell us if you don't want us to use your data in a certain way.
• Complain: if you think we got something wrong, you can complain to a data protection authority, in Spain the AEPD (aepd.es), or the one where you live.

For all of these, write to [email protected].

Children

athl.link is for people 16 and older. If you think a child under 16 made a page, tell us and we'll delete it.

Changes

If we change how we use your data in a way that matters, we'll tell you by email or on the site before it applies.