Strava
Owned by Strava Inc.
strava.com ↗Privacy Panel Label
Privacy Panel
Strava
Data Collected
●Race, Religion & Demographicssensitive
Date of birth and gender
●Health & Fitnesssensitive
Weight and fitness goals
Activity data including heart rate, HRV, VO2max, step count, sleep information
Performance metrics (relative effort, fitness score, performance predictions)
●Message & Email Contentsensitive
Posts, comments, and messages
●Precise Locationsensitive
Precise GPS location
●Financial & Payment Datasensitive
Payment information (last four digits of credit card)
○Contact Info
Name
Email address
Phone number
○Device & Online IDs
Username and password
○Photos, Videos & Audio
Profile photo
Photos and videos
○Contacts / Address Book
Contacts from mobile device or social networking accounts
○App Usage & Diagnostics
Usage information
Device and network information, log files, and analytics
○Browsing & Search History
Cookies and tracking technology data
○Purchases & Transactions
Purchase and subscription information
Data Sharing & Use
noSold to third parties
7 recipient categories (Service providers, Third-party apps and websites, Marketing and advertising partners, …)
YESShared for advertising
YESCross-site tracking
YESUsed for profiling / AI decisions
YESUsed to train AI models
YESDisclosed to law enforcement
Data Uses
Core serviceSecurity / fraudAdvertisingPersonalizationAnalyticsAI/ML trainingThird-party partnerships
Data Retention
not stated (retained as long as needed to provide Services or until account deletion)
Varies by data type
Includes legally mandated retention
Strava retains information as long as needed to provide the Services, subject to…
Consumer Rights
Access
Delete
Portability
Correct
Opt-out
Security
?
Encrypted in transit?
Encrypted at rest?
MFA available?
Breach notificationBrowser Privacy Signals
partialGPC / DNT
This label summarizes privacy practices as disclosed in the company's privacy policy. This is not legal advice. Full policy ↗
This label summarizes privacy practices as disclosed in the company's privacy policy. It is a neutral, factual restatement — not an evaluation. What is this?
Source Evidence
Report an issueIf a specific extraction below looks wrong (the quote does not match the policy, or the YES/no is misinterpreted), use the per-finding flag to help us improve.
What's on the label
Sold to third parties
no92% confidence
If we collect health information from these integrations (such as heart rate), we will not sell or use it for advertising or other similar purposes
Shared for advertising
YES97% confidence
We may also disclose information to marketing partners or third-party advertising networks to promote our services (with your consent, where required). We may also disclose information through the use of cookies and similar technologies.
Cross-site tracking
YES90% confidence
We collect, use, and disclose information through the use of cookies, tracking pixels, SDKs, Google Analytics, and other third-party tracking technologies... inform and serve relevant ads, understand how you interact with ads
Used for profiling
YES88% confidence
We sometimes use AI Features and automated decision-making to analyze your personal information... we may suggest segments, routes, challenges, clubs on Strava, users to follow, or new features.
Used to train AI
YES99% confidence
We use information to enhance the quality, reliability, and/or accuracy of our AI Features by creating, developing, training, testing, improving, and maintaining AI and ML models run by Strava or our service providers.
Signals & rights
Honors GPC
YES97% confidence
You can click the 'Do Not Share My Personal Information' link on the website footer or click on the 'Personal Information Sharing' link in your Privacy Controls in the app or broadcast an Opt-Out Preference Signal, such as the Global Privacy Control.
Honors DNT
no99% confidence
Note that Do Not Track (DNT) is a privacy preference you can set in browsers, but we do not currently process DNT signals.
Sources / Provenance
Analyzed June 3, 2026 · policy fetched June 3, 2026
Archived copy: not yet available
Source hash: a091c395066c…