What we collect,and why.

Your account

Your name, email address, username, and the sign-in codes we email you. If you add them, a profile photo, a short bio and your Instagram handle. We also keep your store customer number so we can match your registration to your account.

Your activities

For each day you log: the date, the type of activity, how many minutes, and if you enter them, distance, elevation, a location, notes and photos. Whether the activity was indoors, because indoor activities don't count toward the human leaderboards.

The social parts

Kudos and comments you give and get, who you're friends with, who you tag as an activity partner, events you say you're coming to, your notifications, and any prize categories you opt out of.

Your dog

If you register one: their name, what they are, their photo, and their Instagram handle if they have one. Yes, really.

Strava, if you connect it

Connecting asks Strava for permission to read your activities. We then store your Strava athlete number, the profile details Strava sends us, the access keys that let us sync, and a copy of each activity we import.

That copy is what Strava gives us for the activity, which can include start location and route. We only import activities from November 1 of the challenge year onwards.

We delete the imported Strava activity data when the challenge ends. We keep each day's totals for time, distance and elevation gain.

Technical bits

A cookie that keeps you signed in, your light or dark theme preference stored in your own browser, anonymous page-view counts from our host, and server logs we use to fix problems and spot abuse.

We don't run advertising trackers.

Three places

• You, when you register, fill in your profile, or log a day
• Our store, which tells us your name, email and what you registered for
• Strava, but only if you connect it, and only what you gave it permission for

To run the challenge

Counting your days, working out streaks and leaderboards, deciding who finished, issuing store credit, and entering you in the draws you chose.

To email you

Sign-in codes, the daily newsletter, reminders if you turn them on, and messages about your results or a prize you've won.

To keep it fair and working

Spotting duplicate or invented entries, fixing bugs, keeping accounts secure, and answering your support requests.

What we don't do

We don't sell your information, we don't rent it out, and we don't use it to target advertising at you.

Your profile page

Any signed-in participant can open your profile. At the top it shows your name, your username, your photo and your bio, and if you added an Instagram handle, your photo links to it.

Under that is how your month is going: your total time, distance and elevation, how many of the thirty days you've done, where you rank on each of the three leaderboards, and a thirty square grid showing which days you did and which you missed.

Then the rest of it:

• The badges you've earned and the date you earned each one
• Whether you're registered this year, and which previous years you took part in
• Your dog's name and photo, if you registered one
• All your posts for that challenge year, with their notes, photos, location, kudos and comments

The rest of the hub

Your posts show up in the community feed, and your name and totals show up on the leaderboards. Kudos and comments you leave carry your name to whoever you left them on.

Your email address is never shown to other participants.

Keeping it quieter

Turning on a private profile in Settings takes you off all four leaderboards and out of the community feed, so your days stop showing up for other participants, friends included.

Your profile page can still be found. Anyone who opens it sees your name, photo and bio, and a note saying the profile is private, and they can still add you as a friend.

Outside the hub

Leaderboards, winners and standout photos also turn up in the daily newsletter, in the store, and on our social channels. Tell us if you'd rather we left you out of that.

The services we use

We use a handful of companies to run the hub, and each of them only gets what it needs to do its job:

• Supabase, for the database, sign-in and photo storage
• Vercel, for hosting the site and counting page views
• Postmark, for sending email
• Shopify, for registration and store credit
• Strava, if you connect it

Their servers are mostly in the United States, so your information is stored outside Canada and can be reached by authorities there under their own laws.

Everyone else

We share your information otherwise only when the law requires it, or when we need to protect someone's safety or the challenge itself.

Turning them off

• Daily reminders: the switch in Settings
• The challenge newsletter and our other newsletters: the unsubscribe link at the bottom of any of them
• Sign-in codes and messages about your results or a prize: these keep coming while your account is open, because they're how the hub works

After the challenge

Once the year is wrapped up we delete the photos, comments, kudos, activity partners, notes, notifications, dog profiles, and everything imported from Strava.

What stays is the plain record of your days: date, activity type, minutes, distance and elevation, so your finisher status and your year-to-year stats still work.

Your account

Your account stays until you ask us to close it, so you can come back next November without starting over.

Strava

Disconnecting Strava deletes the access keys and stops the sync straight away. Activities already imported are removed in the clean-up above, or sooner if you ask.

Seeing and fixing it

Most of it you can edit yourself: your profile, your activities, your photos, your notes. For anything else, email us and ask.

Getting a copy, or deleting it

Email hello@capra.run and ask for a copy of what we hold, or ask us to delete it. We'll come back to you within 30 days. Deleting your account removes your profile, your activities and your posts, and takes you off the leaderboards.

If we get it wrong

Tell us first and we'll try to fix it. If you're not happy with how we handle it, you can complain to the Office of the Information and Privacy Commissioner for British Columbia.

Children

A participant under 16 has to be registered and managed by a parent or guardian, who agrees to this policy for them. Parents can ask to see or delete their child's information at any time by emailing us.

Keeping it safe

Everything travels encrypted, access is limited to the people who run the challenge, and signing in uses a code we email you rather than a password you have to remember. No system is perfectly secure, but that's the bar we work to.

Changes to this policy

We may update this page. The date at the top changes when we do, and for anything significant we'll tell you by email or in the hub.