Legal
Privacy & cookies
Last updated: September 2026
At Draftline we take your data seriously. This page explains what we collect, why, and what control you have. Plain and simple, no fine print.
What we collect
Your account
Email, name and @username to identify you; your FTP and weight (optional) to compute your zones and metrics.
Your training
The sessions you save from the app: power, cadence, heart rate, speed, distance and the .fit file. They're yours; we use them to show your history and progress.
Connections
If you connect intervals.icu, Strava or Garmin, we store encrypted tokens or keys on the server to pull workouts or upload rides. Your Garmin password is not stored: it is used once to sign in. You can disconnect any of them any time.
Community
Your friends, clubs and communities, and your live presence (world and position) while you ride, so others can see you in the moment.
Analytics
Only if you accept analytics cookies, we use PulseView (privacy-first) to understand site usage and catch errors. We never sell your data.
Who we share with
We don't sell or hand off your data. We rely on a few providers to operate:
- ›A server on AWS (EC2) where the app and database run.
- ›AWS S3 to store your .fit files.
- ›Amazon SES for verification emails.
- ›PulseView for analytics and errors (only with your consent).
- ›intervals.icu, if you connect it.
- ›Strava, if you connect it: we upload the .fit of each new ride.
- ›Garmin Connect, if you connect it: we upload the .fit of each new ride. Data goes to Garmin, not the other way.
Security & retention
Your password is hashed, and sensitive keys (intervals.icu, Strava, Garmin) are encrypted. We keep your data while you have an account; if you close it, your sessions, groups and friendships are deleted.
Your rights
You can view and edit your data from your profile, disconnect intervals.icu, Strava or Garmin any time, and request deletion of your account (with everything of yours) by writing to us.
Contact
Privacy questions: support@draftline.live.