Runcraft Privacy Policy

Runcraft is an independent project by Digital Outsider. It is a game that reads your finished runs from Strava and turns them into a character's progress. This policy explains, in plain words, what we read, why, who can see it, how long we keep it and how you can make us delete it. It will be updated before any public release.

1. Who we are

Digital Outsider, an independent software developer. Contact for anything in this policy: support@digitaloutsider.xyz. Runcraft is not affiliated with or endorsed by Strava, Inc.

2. What we collect and why

Runcraft has no account system of its own. You sign in with Strava, and Strava asks you to approve the access below. We request the minimum the game needs.

Data	Source	Why we need it
Your Strava athlete ID, first name, profile picture	Strava, on sign-in	To recognise you when you return and to show your own profile in the app
Your running activities: type, distance, moving and elapsed time, start time and time zone, splits per kilometre, laps, average cadence, average heart rate if your device recorded it, elevation gain, a summary route line	Strava, after each run	To simulate the run for your character: skill triggers, loot, experience, quests. Cadence and start time drive racial passives; heart rate and elevation drive optional quests
Game data: characters, levels, items, coins, quests, the results of each simulated run	Created by Runcraft	This is the game itself
Technical data: a session cookie, server logs with IP addresses and request times (kept up to 14 days), basic usage events such as "run processed" or "item bought"	Your browser and our servers	To keep you signed in, keep the service running and understand which parts of the game are used

We do not read activities that are not runs (rides, swims, hikes). We do not read your Strava followers, clubs, segments or other athletes' data. We do not read second-by-second GPS streams. If you allow "activity:write" in a future version, it will be used only to add a Runcraft line to the description of your own activity, and only after you switch that option on.

3. Who can see your data

• Your running data is shown only to you. No other Runcraft player, and nobody outside Runcraft, sees your distances, paces, routes, heart rate or times. This follows Strava's API Agreement, which we are bound by.
• Other players may see game statistics only: your character's nickname, faction, race, class, level, number of skill triggers and items, and, in a future version, an opt-in leaderboard position. None of this is Strava data.
• We never sell or rent your data, and we never use it for advertising.

4. No AI training

Data obtained through Strava is never used to train artificial intelligence or machine learning models. A future version may offer an optional in-game commentator that describes your own run to you using a language model; if we add it, the request will contain only your own run summary, you will be told before it is switched on, and the provider will be contractually barred from training on the data.

5. Who processes the data for us

• Strava, Inc. — the source of your activities, under its own privacy policy.
• Our hosting provider — the server that runs Runcraft and stores its database.
• GoatCounter — privacy-friendly, cookie-free page-view counting on this website only (not inside the game).

6. How long we keep it

• Raw activity data is kept while your Strava connection is active, so your run history and replays keep working.
• When you disconnect Runcraft in Strava, or revoke access in the game, raw activity data is deleted within 24 hours. Your characters and game results are kept for 30 days in case you reconnect, then deleted.
• Server logs are kept up to 14 days.

7. Your rights and controls

• Disconnect at any time in Strava: Settings → My Apps → Runcraft → Revoke access. Runcraft receives a notification and starts deletion automatically.
• Export your game data and delete everything from inside the game's settings, or by writing to support@digitaloutsider.xyz. We answer within 30 days.
• You may ask us to correct data, restrict its use, or object to it. If you are in the EU, UK or another jurisdiction with data-protection law, you also have the right to complain to your local authority.

8. Cookies

The game uses one strictly necessary session cookie to keep you signed in. This website uses none. GoatCounter counts visits without cookies.

9. Security

Strava access tokens are stored encrypted. All traffic is over HTTPS. Access to the database is restricted to the developer. No system is perfectly secure; if a breach ever affects your data we will tell you and Strava without undue delay.

10. Children

Runcraft is not intended for anyone under 16. We do not knowingly collect data from children.

11. Changes

We will change this policy as Runcraft grows, and will show a notice in the game and on this page when we do. The version and effective date at the top tell you which text applies.