PRIVACY POLICY

Your run is personal. This policy explains what we collect, why, and how long we keep it. No tracking ads, no selling data.

01 — WHAT WE COLLECT

• RUN DATARoute, distance, time, pace — what you upload
• ACCOUNTEmail only, no password, no profile
• ORDERName, shipping address, payment confirmation
• DEVICEAnonymous visit stats, no cross-site tracking

02 — WHY WE USE IT

Run data is used for one thing: rendering your object. We do not train AI models on your personal routes. We do not build a runner profile to sell to anyone. Visit stats are aggregated to understand which page lost you — not who you are.

03 — THIRD PARTIES

• STRIPEPayment — we never see your card
• SHOPIFYOrder record & fulfillment handoff
• PRINT PARTNERReceives artwork + shipping address only
• STRAVA / GARMINOnly if you connect them, read-only

Each partner is bound by their own privacy policy for the slice of data they process.

04 — HOW LONG WE KEEP IT

• RUN DATA + ARTWORKKept while your order is active, then 90 days
• ORDER RECORD7 years, for tax & warranty claims
• VISIT STATSAggregated, no individual retention

Want your run data deleted sooner? Email us and we will wipe it within 30 days, order record excepted.

05 — YOUR RIGHTS

You can ask for a copy of your data, ask us to fix it, or ask us to delete it. Email support@runobject.com from the address you ordered with and we will respond within 30 days.

06 — COOKIES

We use a first-party session cookie only if you start a creation flow. No advertising cookies, no social pixels, no fingerprinting. Your browser's "do not track" setting is respected.

07 — SECURITY

Run data and artwork are stored in a private bucket with signed access. Payment is handled entirely by Stripe — card numbers never touch our servers. We are a small team, not a fortress, so we keep the attack surface small.

08 — CHILDREN

RUN OBJECT is not for anyone under 13. We do not knowingly collect data from children. If you believe we have, email us and we will delete it.