PRIVACY / OCTOBER 29, 2026

Your data.
Your choice.

This notice covers Alpine accounts, saved rides, contact messages and optional diagnostics. Supabase provides account authentication and storage; Vercel hosts the website.

Contact and feedback

The contact form is unavailable and does not send or store messages.

Account service security

When the connected app service rejects an activity request containing ownership, payment or verification claims that clients cannot set, it can keep the authenticated account ID, event code, count and server times. These records exclude request bodies and sensor traces. Authorized owners review them privately; optional owner emails contain a count and an admin link. Scheduled maintenance removes records after 30 days. These events do not prove cheating or enable desktop surveillance; provider logs, backups and delivered emails have separate retention.

Rider accounts and history

Creating an account verifies your email with Supabase. Secure session cookies keep the browser signed in. Your desktop account and private website history use the same account ID. After login, Alpine automatically saves rides, activity summaries, sensor recordings, route coordinates, names, notes, rider profile settings and your training calendar to your account. Offline changes upload when connected. These are private to your account; authorized operational services process them to deliver account history, metrics and recovery. Account settings provide session revocation, email changes and deletion requests. Deletion revokes service access and queues cloud-file cleanup; exported and device-local copies remain on your devices. Provider logs and backups have separate retention.

Optional usage diagnostics

Desktop diagnostics are off by default and chosen per computer. If enabled, we receive account-linked event IDs, event times, app versions, platforms and operational outcomes. Events exclude sensor readings, routes, notes and email addresses. Owners see grouped reports. Raw events expire after 30 days; turning diagnostics off clears queued events immediately and hosted events when that preference reaches the service. These reports are optional and are not used as proof of rider effort.

Subscriptions

When subscriptions open, Stripe hosts checkout and billing management. Alpine stores a customer reference, subscription status and access expiry. Card details remain with Stripe. Provider financial records have their own retention obligations; requesting an Alpine account deletion cancels its recurring subscriptions before account removal.

Website analytics

On the public production website, we use Vercel Web Analytics to understand visits and page views. It reports aggregate traffic information such as public pages visited, referring sites, device/browser type and approximate country. It does not use advertising cookies. We exclude login, sign-up, password reset, account and admin pages, and remove query strings and fragments from the page URLs we send. We do not send form entries, passwords or ride history to website analytics. How Vercel handles analytics data ↗

Technical information

There are no advertising trackers. Optional account-linked diagnostics are described above; any enabled checkout is hosted by Stripe. Fonts and route assets are served locally. Hosting and service providers can process technical request information needed to deliver and protect the site. When registration or contact is active, we store keyed digests for abuse prevention, rather than raw IP addresses in our application database; inactive rate-limit records expire after two days.

Public browsing does not require account cookies. Rider sign-in uses a separate secure session cookie in production. Staff sign-in uses secure session cookies in production, individual team permissions and an authenticator. Staff access is separate from product accounts. Choosing a staff appearance mode stores that preference in a separate cookie for the admin area. Staff session metadata enforces a 30-minute idle limit and eight-hour MFA limit; obsolete session records are cleaned up on subsequent valid staff access after one day. Team-access change records are kept for 12 months and removed by scheduled maintenance.

This notice covers the website and the connected account, backup and optional diagnostic services described above.