Your data
Privacy Policy
Last updated: June 2026
Ethel's Challenge is a personal project (not a registered charity or company) run by Tom Eggleston. This page explains what personal data the site collects when you connect Strava, why, and the control you have over it. If anything here is unclear, email tom@tomegg.me.
What we collect
- Your Strava athlete ID, first name, last name and profile photo URL.
- Your Strava activities — including their GPS routes — so we can detect which Ethels peaks you've reached.
- Strava access and refresh tokens, so the app can fetch your activities on your behalf.
Why we collect it & legal basis
We use this data solely to run the challenge: matching your activities against the Ethels peaks and showing your progress, map and achievements. The legal basis is your consent, given when you choose to connect your Strava account. We do not sell your data or use it for advertising.
Where it's stored & for how long
Your data is stored in a PostgreSQL database on a private server. We keep it only while your account exists. If you delete your data (see below) or stop using the site, it is removed. You can also revoke the app's access at any time from your Strava settings.
Who we share it with
We don't share your data with third parties for their own purposes. The site does rely on:
- Strava — the source of your activity data (Strava's privacy policy).
- Google Maps — used to display the peaks map (Google's privacy policy).
Your rights
You can access, correct or delete your data at any time. The quickest way to delete everything we hold is the “Delete my data” button on your profile page, which permanently removes your account, activities and peak completions. You can also email tom@tomegg.me with any request.
Contact
Questions about your data? Email tom@tomegg.me.