Terms & Privacy

Last updated: 24 July 2026

This page covers both the Terms of Service and the Privacy Policy for Velometry (velometry.cc). By using the service you agree to the terms below and to the described handling of your data.

On this page Terms of Service Privacy Policy Cookie Policy

Terms of Service

1. What Velometry does

Velometry connects to your Strava account and automatically composes activity descriptions from a template you define, substituting real metrics from each ride (for example wind-factor and year-to-date statistics). The service is provided free of charge.

2. Connecting your Strava account

You access Velometry by authorizing it through Strava's official OAuth flow. That single action serves as your login — Velometry never sees or stores a password. You must comply with Strava's API Agreement, API Policy and Terms of Service when using Velometry, and you may disconnect Velometry from your Strava account at any time. Velometry requests the read, activity:read and activity:write scopes it needs to read your activities and write descriptions back to them. Under Strava's developer terms, access to the Strava API may require you or Velometry to maintain an active Strava subscription; if Strava changes this requirement, it may affect availability of the service.

3. Acceptable use

You agree not to misuse the service: no attempts to disrupt it, reverse-engineer it, access other athletes' data, or use it to violate Strava's terms or any applicable law. You are responsible for the template content you create and for the descriptions published to your Strava activities.

4. Dependence on Strava and third parties

Velometry relies on Strava's API and on the wind-factor engine at windfactor.cc to compute premium wind metrics. Availability, rate limits, or changes to those services may affect Velometry, and we are not responsible for outages or changes originating from them.

5. No warranty

The service is provided "as is" and "as available", without warranties of any kind. Computed metrics are best-effort estimates derived from GPS and third-party data and may contain inaccuracies. You should review generated descriptions before relying on them. On behalf of our third-party service providers (including Strava and the wind-factor engine), we disclaim all warranties, express or implied, including the implied warranties of merchantability, fitness for a particular purpose, and non-infringement; those providers are excluded from all liability for any indirect, incidental, special, punitive, or consequential damages arising from your use of Velometry.

6. Limitation of liability

To the maximum extent permitted by law, Velometry and its operator are not liable for any indirect, incidental, or consequential damages arising from your use of the service, including inaccurate metrics or unintended changes to your activity descriptions.

7. Changes and termination

We may modify or discontinue the service, or update these terms, at any time. Material changes will be reflected by the "last updated" date above. You may stop using Velometry and revoke access from your Strava settings whenever you wish; we may suspend access that breaches these terms.

8. Governing law and contact

These terms are governed by the laws of Poland, and the courts competent for the operator's place of establishment in Poland shall have jurisdiction, without prejudice to any mandatory consumer-protection rights you may have under the law of your country of residence. Questions about these terms: legal@velometry.cc.

Privacy Policy

1. Who we are and how to reach us

Velometry (velometry.cc) is the independent data controller for the personal data described here. For any privacy request — access, deletion, questions, or to withdraw a consent — contact privacy@velometry.cc. For general or technical support, contact support@velometry.cc. You can review or revoke Velometry's access to your Strava account at any time from your Strava "My Apps" settings.

2. What data we collect, and how

We collect data in two ways: from Strava's API when you authorize Velometry (via the OAuth flow and activity webhooks), and directly from you when you write your template. To provide the service we store a minimal set of data tied to your Strava athlete identity:

your Strava athlete ID, used as your account identifier;
Strava OAuth access and refresh tokens and their expiry, so we can read your activities and publish descriptions on your behalf;
your description template text;
operational records of Strava webhook events (e.g. "activity created") that trigger processing.

When we compute metrics we temporarily read activity data from Strava (for example GPS streams and activity summaries), but — as described below — we do not retain it beyond what processing requires.

3. What we do not keep

Metrics are computed on demand. In line with the Strava API Policy, Velometry does not persist data derived from your Strava activities — distances, speeds, power, wind breakdowns and the like are calculated when needed and then discarded. Any raw Strava data is used only transiently and is never retained in a cache for longer than the seven (7) days Strava permits; in production this transient cache is disabled by default, so activity data is fetched live and not stored at all.

4. How we use your Strava data

We use your data solely to operate Velometry: to authenticate you, read the activities we process, compute the metrics your template references, and write the resulting description back to your own Strava activity. In accordance with the Strava API Agreement and API Policy, we specifically commit that we do not:

display or disclose your Strava data to anyone other than you (your data is shown only to you, and each generated description is published only to your own Strava activity);
use your Strava data — or anything derived, aggregated, or anonymized from it — to develop, train, fine-tune, evaluate, or operate any AI or machine-learning system;
aggregate, de-identify, or process your Strava data for analytics, benchmarking, customer insights, or product improvement, or combine it with other data for those purposes;
scrape, bulk-export, or build a database or archive of Strava data beyond the operational scope of the service;
sell, rent, license, syndicate, or otherwise transfer your Strava data to any third party — including advertisers, data brokers, or AI providers — even with your consent;
use your Strava data for advertising, or charge you for access to the Strava API.

If you delete an activity (or data) on Strava, we will stop displaying or using it and reflect that deletion within forty-eight (48) hours. You acknowledge that Strava may collect and use data about Velometry's access to the Strava API for its own purposes, as described in the Strava API Policy.

5. Third parties and subprocessors

We keep the chain of parties who touch your data as short as possible:

Strava — the source of your activity data and your identity provider; your use of Strava is governed by Strava's Privacy Policy.
Wind-factor engine (windfactor.cc) — to compute wind metrics we send only the relevant GPS streams of an activity and receive the wind breakdown back; it acts as a processor on our behalf.
Hosting provider (OVH) — runs the application servers and database in the EU.
Google Analytics — website usage analytics, loaded only if you opt in via the cookie banner (see section 6). No Strava data is ever sent to Google.

We do not share your data with anyone else. We will provide Strava, on request, with a current list of subprocessors that process Strava data.

6. Website analytics (Google Analytics)

To understand anonymous, aggregate usage of our public website we use Google Analytics 4, configured with Google Consent Mode v2 and advertising signals disabled. It runs only after you opt in through our cookie banner; until then, analytics storage is denied and no _ga cookies are set. This analytics covers website usage only and never involves your Strava activity data. You can grant or withdraw this consent at any time via Cookie settings. Details of every cookie are in our Cookie Policy.

7. Legal basis

Where the GDPR applies, we process your Strava identity, tokens and template to perform the service you requested (contract, Art. 6(1)(b)); the initial Strava connection also rests on the consent you give on Strava's authorization screen. Google Analytics is processed on the basis of your consent (Art. 6(1)(a)), given through the cookie banner and withdrawable at any time.

8. Retention and deletion

We keep your stored data (athlete ID, tokens, template, webhook records) only for as long as your Strava account remains connected and the data is needed to run the service. Your data is deleted when any of the following happens: you ask us to delete it, you revoke Velometry's access from your Strava settings, you delete your Strava account, or Velometry ceases to use the Strava API. We complete such deletion of all your Strava data and any personal data derived from it promptly, and in any case within thirty (30) days, from every system under our control, and — where required — certify the deletion to Strava in writing. On request, we will confirm to you that deletion has been completed.

9. How to withdraw consent or request deletion

You can withdraw your consent for the Strava connection at any time by revoking access in your Strava "My Apps" settings; you can withdraw analytics consent via Cookie settings. To request access to, or deletion of, your data, email privacy@velometry.cc — we will action it and confirm completion.

10. Security

We use commercially reasonable and appropriate technical and organizational measures to protect your data. Access tokens are stored only to operate the service and transmitted solely over encrypted (HTTPS) connections; your session is protected by a strictly necessary cookie described in our Cookie Policy. In the event of a personal-data breach involving Strava data, we will notify Strava within twenty-four (24) hours of discovery, as the Strava API Policy requires, alongside any notifications required by law.

11. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict its processing. Strava also lets you export your own Strava data directly through Strava's Bulk Data Export tool. To exercise your rights with us, contact privacy@velometry.cc. This policy does not modify or override Strava's Privacy Policy, which controls in the event of any conflict.

12. Changes

We may update this policy; the "last updated" date above always reflects the current version.