CYCLYNK

Legal

Privacy Policy

Last updated: June 14, 2026

Information CYCLYNK collects

CYCLYNK stores the information needed to create your account, dashboard, and public profile. This includes your Google account identifier, email address, profile handle, display name, profile type, bio, optional social links, and activity data you add manually or import.

Google sign-in

CYCLYNK uses Google OAuth to sign you in. The app requests the openid, email, and profile scopes. CYCLYNK uses the Google user ID to identify your account and stores your email address. It does not store your Google password.

Sessions and cookies

After login, CYCLYNK sets a signed, HTTP-only session cookie named cyclynk_session so you can stay signed in. The cookie is used only for authentication and expires after about 30 days unless you log out earlier.

Activity and profile data

Manual activity entries can include type, title, date, distance, duration, speed, heart rate, calories, and elevation gain. Your public profile displays activity information that matches your selected profile type. Activities hidden by profile type remain saved in your private dashboard.

Strava connection

If Strava integration is enabled and you choose to connect it, CYCLYNK requests Strava access for reading activity data. The app stores Strava access and refresh tokens, token expiry, athlete ID, and imported activity IDs so it can sync activities and avoid duplicates.

Public information

Your public profile page can show your display name, handle, bio, profile type, optional social links, activity stats, charts, highlights, and recent activities. Do not add sensitive information to fields that are shown publicly.

Storage and service providers

CYCLYNK stores application data in a Postgres database. The app also communicates with Google for authentication and, when configured and connected, Strava for activity import.

Your choices

You can update your profile, profile type, bio, and social links from Settings. You can log out to clear your session cookie. To request account deletion, activity deletion beyond the in-app controls, or removal of stored connection data, contact the site owner or administrator.