Privacy policy
Last updated 2026-09-09
RideGeometry is built to need as little about you as possible. This page says exactly what we store, why, for how long, and how you get it removed. There is no cookie banner because we set no third-party cookies and run no third-party trackers.
Who we are
[Operator legal name and address — to be completed before launch]. Contact: hello@ridegeometry.com.
What we store and why
| Data | Why | Legal basis | Kept |
|---|---|---|---|
An anonymous session cookie (rg_sid, a random ID) | To connect your steps into one result and to count visits | Legitimate interest (running and improving the service) | 1 year |
| Usage events (page, action, referrer, UTM tags, country, device type, browser, a salted hash of your IP address) | First-party analytics: which steps work and which don't. We never store your raw IP. | Legitimate interest | Indefinitely, anonymised |
| Your fit numbers, body measurements and riding preferences | To compute and show your result | Contract (providing the result you asked for) | Until you delete the result, or 12 months after it was last opened |
| An uploaded fit report (PDF or image) | To extract your fit numbers. Names and emails are stripped before the document is sent to our extraction provider. | Contract | Until you delete the result, or 12 months of inactivity |
| Your email address (only if you choose Save & share) | To send you a link to your result. A separate, unchecked box lets you opt in to occasional updates. | Contract; consent for updates | Until you delete your data or unsubscribe |
We don't ask for your name. We don't sell or share personal data with advertisers.
Who processes data for us
- Vercel (hosting, EU/US edge network).
- Supabase (database and file storage, EU region, Frankfurt).
- Resend (transactional email, only if you give us an email).
- Anthropic (reading uploaded fit reports; personal details are removed first; documents are not used to train models).
Your rights
You can see everything we hold about a result on its page, download it as a PDF, and delete it with the Delete my databutton, which removes your fit numbers, uploaded report, result and email link immediately. Anonymous usage events are kept. Under the GDPR you also have the right to access, correct, port and object; email us and we'll respond within 30 days. You can complain to your local data protection authority.
Cookies
rg_sid (session, 1 year), rg_edit (lets the browser that created a result edit it, 1 year), and your unit and theme preferences in local storage. That's all. Admin staff additionally get an authentication cookie.
Changes
We'll update this page when anything above changes and note the date at the top. Questions: hello@ridegeometry.com. See also our terms.
Product images and brand rights
Bike photographs shown on bike and results pages are cached copies of product images that manufacturers publish on their own public online stores. We use them only to identify the bike, we link every image back to the store page it came from, and we do not copy marketing copy. A brand can ask us to remove specific images, opt out of product images entirely, or claim its listing and supply its own photos and geometry on its brand page (/brands). Rider and scene photographs are licensed stock (Pexels licence) or commissioned; we never take photos from social media.