Effective November 8, 2026
The Lines Project (linesproject.com) is run by Singletrack Media, LLC, 1090 S Wadsworth Blvd, Unit C #3325, Lakewood, CO 80226, USA (“we”, “us”). We decide what happens to the data described here, which makes us its “controller” under European and UK law.
Questions about this policy or your data go to privacy@linesproject.com. For anything else, contact support@linesproject.com.
When you make an account: your email address (it’s also your username), a password (stored only as a salted hash we can’t reverse), your name if you give one, and your settings, such as units, email choices and a home town if you enter one.
If you join a waiting list: if you leave your email address on our waitlist, or ask us to tell you when our mobile apps launch, we keep that address and the date you left it. You don’t need an account for either, and we collect nothing else through those forms.
From Strava, if you connect it: your activities’ GPS tracks and timestamps, titles, descriptions, dates, types, distances, elevation, the device that recorded them, and their photos and videos along with the photo locations Strava supplies. We ask for activity:read_all, so this includes activities you’ve set to private or “Only You”. We also keep your Strava athlete ID and the access tokens Strava gives us.
From Ride with GPS, if you connect it: the same kinds of information about your trips, and its access tokens.
From Wahoo, if you connect it: each workout’s original recording — its GPS track and timestamps — with its type, name, start time and time zone, duration, distance and climb, which we store to draw your map; your Wahoo user ID and name; and the access tokens Wahoo gives us, which we revoke and delete when you disconnect. Disconnecting Wahoo on the Sync page also deletes every activity that came only from Wahoo, and you can ask us at any time to delete what Wahoo delivered.
From Intervals.icu, if you connect it: each activity’s recording — its GPS track and timestamps, from the original file where Intervals.icu provides it — with its type, name, description, start time, duration, distance, climb, the device that recorded it and the service it came from (such as Garmin or Wahoo), which we store to draw your map; your Intervals.icu athlete ID and name; and the access token Intervals.icu gives us, which we revoke and delete when you disconnect. We never read activities Intervals.icu received from Strava. Disconnecting Intervals.icu on the Sync page also deletes every activity that came only from it.
From COROS, if you connect it: each workout’s original recording — its GPS track and timestamps — with its type, name, start time, duration and distance, which we store to draw your map; an identifier for your COROS account; and the access tokens COROS gives us, which we delete when you disconnect. COROS asks you to share your personal information and your workout data, and its connection can reach more than that: we read your workouts and nothing else — never your health, sleep or training data — and we write nothing to your COROS account. Disconnecting COROS on the Sync page also deletes every activity that came only from it.
From Polar, if you connect it: each activity’s original recording — its GPS track and timestamps — with its sport, date, duration, distance and the device that recorded it, which we store to draw your map; your Polar user ID; and the access tokens Polar gives us, which we delete when you disconnect.
From files you upload: whatever is in the GPX, FIT or TCX files or Strava export you give us.
A GPS track shows exactly where you went, including where it starts and finishes, which for many people is home. We draw your tracks in full on your own map. Privacy settings on Strava or Ride with GPS control what other people see there; they don’t hide your own tracks from you, so they don’t hide them from us.
Your location data is sensitive. Your activity tracks are precise location data, which some privacy laws, including Connecticut’s and Colorado’s, treat as “sensitive data”. We ask for your consent before we first import or upload them. We use them only to provide the service: to show you your own map, statistics, webs and places to explore next. We don’t sell them or use them for advertising. You can withdraw your consent by disconnecting your services and deleting your activities or your account. Without it, we can’t draw your map.
When you subscribe: see Payments below. We never see your card.
When you use the site: our servers log each request, including your IP address, browser type, the page asked for and the time, which we use to keep the site working and secure (for example, locking out repeated wrong passwords). We keep these logs for up to 90 days. If something breaks, an error report goes to Sentry (see below); it doesn’t include your IP address, name or email. If one of our sign-in or account pages seems to get stuck (it freezes, something covers the form, or clicks don’t get through), it sends us a short technical report: which page, what went wrong, your browser and operating system, and details about the page itself. It doesn’t include your account, your email address, your IP address or anything you typed.
If the sign-up form turns you back (a password that’s too short, say, or the Terms box left unticked), we note which field it was and what kind of problem, whether you came from an invitation, your browser and operating system, and, if you then create an account, that you did, but not which account. We don’t keep what you typed, your email address or your IP address.
When you write to us: your message and address.
One thing: activity notes, which are on by default. They keep a record of what each activity added to your map on the activity itself, where you look back at it later. From the moment you connect Strava or Ride with GPS, we add a line to the description of each new activity saying what it added to your map — new miles, the size and rank of the web it landed in, whether it joined two webs, whether it made your longest line longer — and how many days in a row you’ve been active, followed by a link to linesproject.com. You choose in Settings which of these a note includes, and when none of the ones you chose applies to an activity, no note is written. For example:
Strava and Ride with GPS each have their own switch, in Settings, and turning one off stops the next note. On Strava, notes need a separate permission (activity:write). We ask for it when you connect, and you can untick it on Strava’s own consent screen; without it, nothing is written to Strava. Ride with GPS has a single permission that covers both reading and writing, so there the switch is the only way to stop notes. We read the current description immediately before writing, so whatever you or another app put there stays. Each note is written once and we don’t come back to change it. Switching notes off doesn’t remove notes already written — you can edit or delete those yourself on Strava or Ride with GPS.
This is the one part of The Lines Project other people can see, because a description is as visible as the activity it’s on. We never create or delete an activity, and never change its title, photos, route or privacy setting.
We don’t sell your personal information, and we don’t “share” it for cross-context behavioral advertising as California law defines that. We run no ads, use no advertising trackers, don’t give your data to data brokers, and don’t use it to train AI or machine-learning models.
Our team. Authorized personnel of Singletrack Media, LLC can access account and activity data when it’s needed to support you, fix a problem, or keep the service secure.
The companies we use. Each gets only what its job needs and may use it only to do that job for us, except where noted:
Because we have to. We’ll disclose information when the law requires it, or when we believe in good faith it’s needed to protect someone’s safety or our rights. If The Lines Project is sold or merged, your data would move with it under this policy, and we’d tell you first.
Nobody else. No other user of The Lines Project can see your map, tracks or stats.
Subscriptions are sold through Link, LLC, Stripe’s merchant of record, and processed by Stripe. Your card details go to Stripe and never to us. Link and Stripe act as their own controllers for the payment data they hold, under their own privacy policies (Stripe, Link). Your receipts, and your card statement, will name Link. We keep only what we need to know whether your account is subscribed — the subscription’s status and dates and Stripe’s identifiers for it.
Service email. We email you about your account and the service: to confirm your address, reset your password, tell you when your map is ready, about your subscription, and before we delete an inactive account. Messages about your account’s security, your subscription and deletion can’t be turned off while you have an account, because they tell you about things that affect it. Receipts and some billing reminders come from Link, which sells Pro on our behalf.
Three service emails are on unless you turn them off: a note when a rebuild of your map adds something new, a weekly recap of your own activity (Mondays, for the week before, only after a week you recorded something), and a monthly recap (early each month, only after a month you recorded something, never on the same day as the weekly one). Each has an unsubscribe link and its own switch in Settings.
Product news. Only if you ask for it, by ticking the box when you sign up or turning on Product news in Settings, we email you about new features and changes to The Lines Project, a few times a year. You can stop anytime with the unsubscribe link in any of those emails or the switch in Settings. It takes effect right away and doesn’t affect service email. Every product news email names us and gives our postal address.
Waiting lists. If you leave your address on our waitlist, we’ll email you an invitation when there’s room and tell you when The Lines Project opens to everyone. If you ask to hear when our mobile apps launch, we’ll send you one email when they do. We send nothing else to these addresses, and joining either list doesn’t sign you up for product news. Every one of these emails names us, gives our postal address and has an unsubscribe link.
Amazon SES delivers our mail. If a message bounces or is marked as spam, we record that and stop sending to that address. If you mark a product news email as spam, we treat that as unsubscribing.
When you create an account, we record that you ticked the box confirming you’re 18 or older and agree to the Terms of Service. The record holds the date and time, the exact words next to the box, where you ticked it, and the version of the Terms. We make the same kind of record when you accept a new version of the Terms, when you allow us to use your activities’ location data, when you confirm at checkout that your subscription renews automatically, and whenever you turn product news on or off.
We keep these records for as long as your account exists and for three years after it is deleted, or longer while a dispute about your account is open. We keep them so that we can show what you agreed to, which some laws require us to be able to do. After that they are deleted. They hold your email address and these details, and nothing about your activities.
Everything travels over HTTPS. Passwords are stored only as salted hashes, access to our servers is limited to key-based login, and your map files are served only to your own signed-in session. No system is perfectly secure; if a breach affects your personal information, we’ll tell you as the law requires.
Anyone can, from Settings:
You don’t need an account to leave a waiting list: use the unsubscribe link in any email from it, or email privacy@linesproject.com and we’ll remove your address.
Depending on where you live — including the EEA, the UK, California and several other US states — you may also have the right to access, correct, delete or receive a copy of your personal information, to object to or restrict how we use it, and to withdraw consent at any time. Email privacy@linesproject.com and we’ll answer within 30 days. If we turn down your request, you can appeal by replying to our answer or by emailing privacy@linesproject.com with “Appeal” in the subject. We’ll answer the appeal within 60 days. If you’re still not satisfied, you can contact your state attorney general. We may need to confirm it’s you. We won’t treat you differently for using any of these rights. If you’re in the EEA or UK and unhappy with our answer, you can complain to your data protection authority.
Our servers are in the United States, and so are most of the companies above. If you use The Lines Project from outside the US, your information is transferred to and stored in the US, where privacy law may differ from yours. We transfer it because that’s where the service runs; where European or UK law requires more, the companies we use rely on Standard Contractual Clauses or the EU–US Data Privacy Framework.
The Lines Project is for adults. You must be 18 or older to create an account, and we don’t knowingly collect personal information from anyone under 18. If we learn that an account belongs to someone under 18, we close it and delete its data, including every activity track, within 30 days, apart from any record the law requires us to keep, such as a billing record. The same goes for our waiting lists: if we learn that an address on one belongs to someone under 18, we delete it. If you believe someone under 18 is using The Lines Project, email privacy@linesproject.com.
If we change this policy in a way that matters, we’ll email you before it takes effect and update the date at the top. Older versions are available on request.
Singletrack Media, LLC · 1090 S Wadsworth Blvd, Unit C #3325, Lakewood, CO 80226, USA · privacy@linesproject.com