Privacy Policy

Account information — when you sign up, we collect your email address, name, and (optionally) profile photo, bio, location, and links to your other social profiles. If you sign in via a third party (e.g. Facebook), we receive your name, email, and profile picture from that provider.

Activity — events you create, attend, or RSVP to; clubs you join; messages you send; photos and videos you upload; vehicles in your garage; and your interactions with shops, tracks, and other listings.

Payment information — if you buy a ticket, merchandise, or a Featured Slot, our payment processor Stripe collects your card details directly. We never see or store your full card number.

Connected accounts — if you connect a Facebook Page or Instagram Business / Creator account, we receive: your Meta user ID, your Pages' access tokens (stored as ciphertext), Page metadata, and the public posts / media you authorize us to display or publish. See “Facebook & Instagram” below.

Device and log data — IP address, browser type, pages visited, and timestamps, used to keep the service running and detect abuse.

Mobile app — if you use the Stradena app for Android or iOS, we also collect your app version and device platform. If you allow notifications, we store a push notification token (issued by Google Firebase Cloud Messaging) linked to your account so we can deliver alerts; it is removed when you sign out or delete your account, and stops working if you turn notifications off. If you allow location access, your device's location is used to show nearby events, drives, shops, and tracks and for turn-by-turn navigation. We store a location only when you submit something that needs it — a GPS rally check-in or a road report — and it is saved with that check-in or report. We do not track your location in the background. You can change either permission at any time in your device settings.

• To provide, maintain, and improve Stradena.
• To show your profile, events, photos, and other content to other Stradena users according to your visibility settings.
• To send transactional emails (event reminders, RSVP confirmations, password reset, etc.).
• To send push notifications in the mobile app (for example, messages, booking updates, and event reminders) if you have turned them on.
• To detect, prevent, and respond to fraud, abuse, or violations of our Terms.
• To comply with legal obligations and respond to lawful requests.

We do not sell your personal information, and we do not use it to train third-party AI models.

If you connect a Facebook Page or Instagram Business / Creator account via Stradena's Meta integration:

• We receive an access token from Meta that lets us read your Pages' posts and (with your permission) publish on your behalf. Tokens are encrypted at rest.
• We cache recent posts and media so they render on your Stradena profile, organization, event, and club pages without re-querying Meta on every page load.
• We never read your personal Facebook timeline, your friends' data, or your private messages. We only access what you explicitly authorize for the Pages / accounts you connect.
• You can disconnect at any time from Settings → Integrations, or revoke access directly from Facebook's Business Integrations settings. We honor Meta's deauth and data-deletion webhooks within 24 hours.

For full removal of all data we've received from Meta, see our Data Deletion Instructions.

• Other Stradena users — according to your visibility settings. By default, your profile is public (discoverable in our directories). You can switch to private or hidden in Settings → Privacy.
• Service providers — vetted vendors who help us operate Stradena: Hostinger (hosting), Neon (database), Google (sign-in and Firebase push notifications), Cloudinary (image hosting), Resend (email), Stripe (payments), Mapbox (maps), Anthropic (LLM extraction), Firecrawl (web scraping), Printful (merch fulfillment).
• Legal & safety — if required by law, court order, or to protect the safety of our users.

We do not sell personal information.

Regardless of where you live, you can:

• Access — see what we have. Most of it is visible inside your account.
• Correct — update your profile from Settings → Account.
• Delete — permanently remove your account and data via Data Deletion Instructions.
• Request — contact Stradena via the contact form for a copy of your personal data.

EU/UK/California users have additional rights under GDPR, UK-GDPR, and CCPA respectively. To exercise them, submit a request through the contact form with the “Legal & privacy” category selected.

We keep your account data as long as your account is active. After deletion, production data is purged within 24 hours; encrypted backups roll off within 30 days. Anonymized aggregates (e.g. event attendance counts) may persist but cannot be linked back to you.

Stradena is intended for adults 18 and older and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a minor has provided data to us, please reach out through our contact form and we will delete it.

We may update this policy. When we do, we'll update the “Last updated” date at the top and, for material changes, email account holders or display a notice in-app.

Stradena LLC — 116 John St, New York, NY, USA

For privacy questions or requests, use the contact form with the “Legal & privacy” category selected — messages route to our privacy team.