The short version
We use your data to connect Strava, calculate the metrics you select, update your description and manage your subscription. We do not sell personal data.
The data controller is Zinzolin S.L., operator of MetricSky. Its identity and contact details are provided in the legal notice.
Encrypted activities are retained until account deletion.
Disconnect, export settings or delete your account.
Personal and activity data is not sold or used for advertising.
Data we process
We distinguish durable account history from short-lived technical processing data.
Account and settings
- A minimal internal account identifier and consent state.
- Language, units, composer format and activity filters.
- Stripe customer and subscription references, not card details.
- First-party conversion events limited to the action type, language and, when present, bounded campaign labels; no IP address, user agent, coordinates or activity description is stored with these events.
Encrypted activity history
- Minimized activity history and derived calculations remain encrypted until account deletion. Raw responses, full streams, and transient technical data are deleted within 7 days.
- Calculated metrics, previews, charts and the geographic route when enabled.
- Weather and air-quality conditions used for analysis, with provenance.
Private activities remain displayed without precise location data.
Why we use it
Processing is limited to providing and protecting MetricSky.
- Authenticate your Strava connection and requested scopes.
- Calculate selected metrics and update the managed description block.
- Create and maintain your Stripe subscription entitlement.
- Prevent abuse, diagnose failures and keep the service secure.
Real Strava data and anything derived from it is never supplied to an AI system.
Retention and deletion
Activity history remains attached to your account; purely technical data keeps a short lifetime.
Disconnecting removes the active Strava connection and stops new processing without erasing history. An encrypted token may be retained for up to 24 hours solely to retry revocation, then is deleted. Account deletion erases activity history and service-owned settings.
Service providers
Data is shared only with providers needed to deliver the service and according to your choices.
- Strava
- Provides activity access and receives the updated managed description block.
- Stripe
- Hosts checkout, payment details, invoices and subscription management.
- Open-Meteo / Copernicus CAMS
- When enabled after that explicit agreement, the contracted Open-Meteo service receives only minimum rounded coordinates and times for weather, air-quality and open-water marine models; air-quality estimates are attributed to Copernicus CAMS. Marine values are modeled conditions, not bathing-safety or navigation advice. Provider information
Your choices and rights
Depending on your location, you may exercise the following rights:
- Access the personal data we hold about you.
- Correct inaccurate account information.
- Delete your account and associated data.
- Object to or restrict certain processing.
- Receive an export of developer-owned settings.
Security
Tokens are encrypted at rest, sensitive routes are protected against cross-site requests, and production services use restricted network boundaries. No online service can promise absolute security.
Contact
For a privacy request, contact the operator at:
[email protected]