Privacy policy
Early-access privacy policy — paid orders remain closed. Private activity/photo intake is not active. The paid-order sections require qualified review and operational verification before activation.
Last updated: 5 August 2026. WhereYouRan is a small studio based in Sweden that turns your race data into a personal film. This page explains, in plain language, what we do with your data. Controller and contact: hello@whereyouran.com.
Early-access and private-pilot requests
If you actively tick the waitlist box and submit the form, we collect your email address and signup time for one purpose: to send one opening or private-pilot invitation and administer that request. The legal basis is your consent under Article 6(1)(a) GDPR. We do not turn this request into a general newsletter, sell the address, or use it for unrelated advertising.
The protected list is stored with the website hosting provider, Hostinger. Signup addresses are not copied to a personal Gmail inbox. The address is deleted when you withdraw, 30 days after the invitation it was collected for, or six months after signup—whichever comes first. Reply to the invitation or email hello@whereyouran.com to withdraw consent early. Withdrawal does not affect processing that was lawful before it was withdrawn.
Accepted pilot orders
- Your email — to confirm scope, administer payment and delivery, and support the accepted order.
- Your activity file (GPX/TCX/FIT) — it contains your route (location data) and timestamps. We use it for one purpose: rendering your film.
- Your authorized photograph, display facts and three answers — to create the visual and runner-approved journal text in the film.
- Order and consent records — to administer the agreement, document choices, handle support and meet applicable legal obligations.
The main legal basis for accepted-order fulfillment is taking steps at your request before a contract and performing the contract, Article 6(1)(b) GDPR. Records that law requires us to keep are processed to meet a legal obligation. Publishing a route, photo, quote or film for marketing is separate and off by default; it requires a distinct permission.
What we deliberately do NOT keep
- Heart rate, cadence and power are removed on ingestion. Your film doesn't need them, so we strip them before rendering and never display or store them in the finished product.
- Photo metadata (including GPS location inside the image) is stripped when we process your photo.
- We run no analytics, no advertising pixels, and set no cookies. That's also why there is no cookie banner.
How long we keep things
- Source files (your activity file and original photo): the pilot policy is deletion within 14 days of delivery. Paid intake will not open until that deletion operation and its evidence log have been tested.
- Your film and its page: kept so you can watch and share it — deleted whenever you ask.
- Order details (email, title, message): kept up to 12 months for support, then deleted.
Your film is private by default
Your film lives at an unlisted address that is practically impossible to guess and is excluded from search engines. Only people you share the link with can see it. We never publish your film, your route, or your photo anywhere without your written permission.
Providers and recipients
Hostinger hosts the website and protected waitlist store. Before any payment or private file intake opens, this section will name the payment, email and delivery providers actually enabled and explain any relevant international transfer safeguards. We do not sell personal data. Private route, photo and story material is not placed in analytics, content tools, public map services or AI prompts.
Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to withdraw waitlist consent, object where that right applies, or ask us to delete information that is no longer needed — email hello@whereyouran.com and we'll confirm within a few days (at most 30). If you're unhappy with how we handle your data, you can complain to the Swedish Authority for Privacy Protection (IMY).