Public policy
Privacy
Effective August 6, 2026
What we collect
When you connect Strava, Segment Crusher receives your Strava athlete identifier, basic profile details, authorization tokens, routes, segments, and segment efforts needed to provide route planning. We do not ask for your Strava password.
How we use data
We use this data only to authenticate your account, display your segment and route catalog, build routes, create exports, and respond to your requests. We do not sell Strava data, use it for advertising, or provide it to AI model providers.
Storage and retention
Authorization tokens are stored in a private server-side connection record. Your browser stores a device-local cache of fetched segments, routes, home location, and route-planning preferences. Server connection data is retained until you disconnect, revoke access in Strava, or request deletion. Browser data remains until you disconnect, clear site data, or your browser removes it.
Service providers
Segment Crusher sends requests to Strava for authorized athlete data and may use Mapbox, OpenStreetMap-based map and routing providers, Esri, CARTO, and Open-Meteo to provide maps, routes, elevation, and weather. Route locations may be sent to these providers to fulfill the feature you request.
Delete or revoke
Choose Disconnect in the app to revoke the Strava connection, delete server-side connection records, and clear device-local route data. You can also revoke access from your Strava account settings. For an access or deletion request, email ryan@litwiller.io.
Changes
We may update this policy as the product or legal requirements change. The effective date above identifies the current version.