This privacy policy describes how the Les segments app ("the App", "we") collects, uses and protects the personal data of athletes who use it. Our goal is to offer community leagues and challenges around Strava segments while complying with the General Data Protection Regulation (GDPR), the ePrivacy Directive and the French "Informatique et Libertes" law.
1. Data we collect
When you create an account and use the App, we may collect and process the following categories of data:
- Account data: username, Strava ID, email address, profile picture, optional biography and preferences (language, notifications, plan).
- Authorized Strava data: athlete information, list of your public running activities, efforts performed on the segments featured in the current rounds, times, distance, elevation and related technical metadata (date, segment ID).
- Participation data: leagues and teams you joined, seasons and rounds you follow, leaderboard positions, submitted times (via Strava or manual entry), prizes you may have won.
- Technical data: App version, device model, operating system, technical install identifiers, push notification token, IP address (technical logs), error logs required for proper operation.
- Advertising data (if you use the ad-supported version): device advertising identifiers (IDFA on iOS, Google Advertising ID / AAID on Android), technical information sent to the advertising SDK, ad interactions, and consent signals (UMP, ATT). This data is processed primarily by Google (AdMob); see section 4.
We do not collect your postal address, phone number or banking details through the App. We do not import the full GPS trace of an activity: only efforts associated with the segments involved in a round or challenge are used.
2. Purposes and lawful basis
Your data is processed for the following purposes:
- Service delivery (lawful basis: contract performance): manage your account, display leagues, seasons and rounds, compute leaderboards, allow time submissions, notify you of your results.
- Community engagement (lawful basis: legitimate interest): highlight leaderboards, awards and league events, and let athletes compare themselves.
- Improvement and analytics (lawful basis: legitimate interest): measure usage in an aggregated way to improve the service.
- Optional communications (lawful basis: consent): inform you about new rounds, records or reminders, only if you opted in.
- Advertising (lawful basis: consent where required): fund the free service through ads, including personalized ads when you have consented; otherwise, non-personalized ads where permitted. See section 4.
3. Connecting to Strava
Les segments is an application that is independent from Strava, Inc. and relies on the Strava API through OAuth 2.0. When you connect your Strava account, you are redirected to Strava and must explicitly authorize the requested scopes. You can revoke this access at any time from your Strava app settings .
The App only uses Strava data for the purposes described above. In accordance with the Strava API terms:
- we never sell Strava data;
- we only store the data strictly necessary to operate the service (segment efforts, identifiers, times);
- Strava's brand, logo and visual assets remain the property of Strava, Inc.
4. Advertising and personalization
The free version of the App may display ads provided by Google AdMob (banners, app-open ads, interstitials). Users on a Premium plan do not see these ads.
In accordance with the GDPR, the ePrivacy Directive and app store rules:
- Consent (UMP): in the European Economic Area, the United Kingdom and territories where Google requires it, a consent form (Google User Messaging Platform) is shown before personalized ads are requested. You can accept, decline or configure your choices.
- App Tracking Transparency (iOS): on iOS, the system may also ask for permission to use the advertising identifier (IDFA) for cross-app tracking. Declining does not prevent you from using the App.
- Personalized ads: only if your consent (and, where applicable, ATT authorization) allows it. They rely on advertising identifiers and signals sent to Google / its advertising partners.
- Non-personalized ads (NPA): if you decline personalization or tracking, the App may still show non-personalized ads without using your advertising profile for targeting.
- Measurement: advertising measurement initialization is delayed until the consent framework allows it (delayAppMeasurementInit).
You can change or withdraw your advertising consent at any time from Settings > Ad privacy options in the App (when Google requires a privacy-options entry point). Ads are not directed at children: the service is for users aged 13 or older, and parental consent is required for minors.
To learn more about Google's advertising practices, see Google's Privacy Policy and AdMob & data protection .
5. Sharing with third parties
We never sell your data. It may be shared with a limited set of technical processors or partners for the purposes described above:
- Hosting: OVH SAS, our infrastructure provider in France (see legal notice).
- Strava, Inc.: provider of the API used to retrieve your efforts on the relevant segments.
- Mobile notifications: Apple Push Notification Service and Firebase Cloud Messaging (Google) for optional notifications.
- Advertising: Google LLC / Google Ireland Limited (AdMob, User Messaging Platform and related measurement services). Google's advertising partners may also receive technical or advertising data depending on your consent choices. These processing activities may involve transfers outside the European Economic Area; Google relies in particular on standard contractual clauses and other mechanisms provided for by the GDPR.
6. Cookies, identifiers and audience analytics
The les-segments.fr website may use strictly necessary technical cookies and, where applicable, audience analytics tools. You can configure your browser to block these cookies; some features may then be degraded.
The mobile App does not use classic browser cookies. However, the Google AdMob advertising SDK may use device advertising identifiers, local storage and similar technologies to serve and measure ads, only within the framework described in section 4 and according to your consent choices.
7. Data retention
Your account data is kept for as long as your account is active. After your account is deleted, it is erased or anonymized within at most 30 days, except for data we must retain for legal obligations (accounting, technical logs). Public performances may be retained in an anonymized form for statistical purposes. Data processed by Google AdMob is retained according to Google's retention policies.
8. Your rights
In accordance with the GDPR and the "Informatique et Libertes" law no. 78-17, you have the right to access, rectify, erase, restrict, port and object to the processing of your personal data, as well as the right to withdraw consent at any time (without affecting the lawfulness of prior processing). You can:
- access, modify or delete most of your data from the Settings > My account screen of the App;
- manage advertising consent via Settings > Ad privacy options;
- revoke Strava access from your Strava app settings ;
- also limit advertising tracking via your device system settings (ATT on iOS, Google ad settings / advertising ID reset on Android);
- contact us by email at contact@les-segments.fr for any further request.
If you disagree, you also have the right to lodge a complaint with the French data protection authority CNIL.
9. Security
We implement reasonable technical and organizational measures to protect your data: encryption in transit, access control, logging, security updates and regular backups. No system is infallible: we encourage you to choose a strong password for Strava and to enable two-factor authentication.
10. Disclosure
We may be required to disclose information about you in response to a judicial request or to an authority conducting an investigation related to an illegal use of the service.
11. Changes to this policy
We may update this policy to reflect the evolution of the App or the legal framework. The last update date is shown at the top of this page. Material changes will be highlighted in the App or via email. By continuing to use the service after such notification, you accept the updated version.