Privacy Policy
Last Updated: October 21, 2026
EnduranceOS is a race nutrition planning tool for endurance athletes. Your privacy is a core value — your performance data belongs to you, not advertisers.
1. Data We Collect
| Data | When | Purpose |
|---|---|---|
| Race inputs | When you use the calculator | Generate your fueling plan. Processed client-side; not stored unless you save a plan. |
| Email address | When you save a plan | Deliver saved plan links, PDFs, and optional race-week reminders. |
| Saved plans | When you save a plan | Store your inputs and outputs so you can reload, edit, and share. |
| Weather data | When you select a location | Fetch weather from Open-Meteo. We send only coordinates and date — no personal data. |
| Feedback | Optional, post-race | Improve our formulas. Linked to your plan, not your identity. |
| Hashed blog view identifier | When you view a blog post | Prevent duplicate or bot-heavy counting and maintain more accurate public read counters. |
| Forecast opt-in | Optional | Send race-week weather and nutrition reminder emails. |
| Race directory data | Not user-provided | Publicly available race details (names, dates, locations) aggregated from third-party APIs. No personal data is collected through race pages. |
We use Vercel Analytics for anonymized, aggregate page view data (no cookies, no IP tracking, no fingerprinting).
For the current visit only, the site temporarily keeps how you arrived (campaign tags, including ad click IDs, referring site, and landing page) in your browser's session storage to attribute analytics. It is cleared when you close the tab. We do not use cookies for this.
Storage in your browser
Your browser also keeps a few practical things. The email you used to save a plan stays so you do not have to retype it, until you clear this site's data. It remembers if you dismissed the feedback banner, and it keeps a weather forecast for about 30 days. For blog posts, it stores the date you viewed a post and sets a short-lived blog_view cookie, only so the same view is not counted twice.
2. How We Use Your Data
- Plan generation: Your inputs create a personalized fueling blueprint. The calculator runs client-side in your browser.
- Plan delivery: If you provide an email, we use it to send your saved plan link, PDF exports, and optional reminders.
- Formula improvement: Post-race feedback is aggregated and stripped of identifying information. We never analyze individual feedback tied to your email.
3. Third-Party Services
| Service | What we share | Why |
|---|---|---|
| Supabase | Saved plans, email, feedback, hashed blog view identifiers | Database hosting |
| Resend | Email address | Transactional email delivery |
| Open-Meteo | GPS coordinates, date | Weather data (no personal data sent) |
| Vercel | Standard web request data | Application hosting |
| Vercel Analytics | Anonymized page views | Understand which pages are used (no cookies, no IP tracking) |
| PostHog | Anonymous interaction events (cookie-free, kept in memory in your browser) and calculator session replays. PostHog does not store IP addresses. | Understand feature, calculator, CTA, and affiliate-link usage, and fix confusing parts of the calculator |
| RunSignUp | None (we read their public API) | Source race details (dates, locations, registration status). Registration links may include an affiliate tracking parameter. |
| Amazon | None before an outbound click; product URLs include an affiliate tag | Product recommendations and affiliate attribution |
| World Triathlon | None (we read their public API) | Source international triathlon race details. |
On the calculator, PostHog may record an anonymous replay of how you interact with the page (clicks, scrolling, and page layout) to help us fix confusing parts. Recordings begin when you use the calculator and may include other pages you visit in the same session. Text you type into form fields, including email, is masked and is not recorded. Recordings are kept for 30 days. Those recordings do not use cookies, and PostHog does not store IP addresses.
We do not share your data with advertisers, data brokers, insurance companies, employers, or any party not listed above.
4. Affiliate Links
Some registration links to RunSignUp and some disclosed Amazon product links include affiliate tracking parameters. If you register for a race or buy a product through one of these links, EnduranceOS may receive a small commission at no additional cost to you.
EnduranceOS does not load Amazon ads, product images, or Amazon tracking scripts. Amazon receives information after you follow an outbound product link and handles that visit under its own privacy policies. Our anonymous analytics record which product link was selected, not what you purchase.
5. Data Retention
- Saved plans and email: Retained until you request deletion. There is no automatic expiration.
- Feedback: Retained indefinitely in aggregated form for formula improvement.
- Hashed blog view identifiers: Retained for anti-abuse and read-counter accuracy.
- Calculator inputs (unsaved): Never stored on our servers. Processed entirely in your browser.
- How you arrived: Kept in your browser's session storage for the current visit only, then cleared when you close the tab.
- Calculator session recordings: Kept by PostHog for 30 days. A recording can continue onto other pages in that same visit. Typed form text, including email, is masked and not recorded.
- Forecast opt-in: You can unsubscribe at any time.
6. Your Rights
- Access your saved plan data via your plan link at any time.
- Delete your email, saved plans, and all associated data by contacting us. We process deletion requests within 30 days.
- Opt out of reminder emails at any time.
- Export your plan as a PDF.
To exercise any of these rights, email hello@enduranceos.app.
7. Security
- All data is transmitted over HTTPS.
- Database access uses service-role keys restricted to server-side operations.
- We do not store passwords (there are no user accounts).
- Plan links use unique, unguessable identifiers.
8. Children
EnduranceOS is not directed at children under 16. We do not knowingly collect data from minors.
9. Changes to This Policy
If we make material changes, we will update the “Last Updated” date at the top of this page. Continued use of EnduranceOS after changes constitutes acceptance of the updated policy.