Privacy Policy

1. Introduction

Bharat Marathon Club ("we", "our", or "us") provides a platform for runners to track their progress in the 8 major Indian marathons. This Privacy Policy explains how we collect, use, and protect your information when you use our website.

2. Information We Collect

We do not require you to create a separate account. Instead, we use your Strava account to authenticate you. When you connect via Strava, we access the following:

• Profile Information: Your name and Strava athlete ID, which we use to display your customized dashboard.
• Activity Data: We read your activity history (specifically runs) to identify marathon-distance efforts (≥41km). We access metadata such as distance, moving time, elapsed time, start date, and approximate start location (latitude/longitude) to match runs with official race cities.

3. How We Use Your Data

We use your data solely for the following purposes:

• Challenge Tracking: To statistically verify if you have completed any of the 8 Tier-1 marathons on their official dates.
• Scoring & Certification: To compute your "Bharat Marathon Club" score (based on completion time) and generate a downloadable certificate of your achievements.

We do NOT: Sell your data, display advertisements, or share your personal information with third parties. We do not create public leaderboards without your explicit consent.

4. Data Storage and Security

Storage: We do not store your full activity history in a persistent database. Your activity data is fetched on-demand from Strava and processed temporarily to render your dashboard. We may cache summary statistics for performance (short-term).

Security: Your Strava access tokens are stored securely in an httpOnly cookie in your browser. This cookie is encrypted and inaccessible to client-side scripts, protecting it from cross-site scripting (XSS) attacks.

5. Your Rights and Control

You have full control over your data:

• Revoke Access: You can disconnect our app at any time by going to your Strava Settings > My Apps and clicking "Revoke Access" for Bharat Marathon Club.
• Data Deletion: Since we primarily rely on on-demand fetching, logging out clears your session and tokens from your browser. To request the removal of any potential residual logs or cached summaries, please contact us.

6. Contact Us

If you have any questions about this Privacy Policy, or to request data deletion, please contact us at: