Privacy Policy
Last updated: April 16, 2026
This is a plain-language summary of how Endless Rally handles your data. We try to collect as little as we can, never sell it, and let you delete it whenever you want.
Who runs this site
Endless Rally is operated by a solo developer based in British Columbia, Canada. Contact: fun@endlessrally.com.
What we collect
When you create an account:
- Email address — for login and account recovery
- Password — stored as a one-way bcrypt hash; we cannot read your actual password
- Username and display name — public, shown on the leaderboard and your profile
When you use the app:
- Bikes you add — year, make, model, nickname, color, odometer, optional build thread URL
- Logs you create — service entries, modifications, fuel stops, mileage updates, parts catalog
- Photos you upload — bike photos, receipts, odometer pictures, mod photos
- Optional profile info — bio, location, ADVRider/Reddit/Instagram handles
Things we do NOT collect:
- Your real name (unless you put it in your display name)
- Your home address
- Your payment information directly (Stripe handles all payments when subscriptions launch — they store the card data, not us)
- Your IP address beyond what's in standard server logs (auto-rotated)
- GPS coordinates from your photos — we strip EXIF metadata before storing photos
How we use your data
- To run the service: store your bikes and logs, show you the dashboard, calculate your leaderboard rank
- To show your public bike on the leaderboard and rider profile (only if you set the bike to public)
- To send you account emails: confirmation, password reset
- To answer if you email fun@endlessrally.com
We do not sell your data. We do not show targeted ads based on your data. We do not share your data with marketers.
Third party services
We use these companies as data processors. Each has their own privacy policy:
What's public vs private
Public by default:
- Your username and display name
- Your bike year/make/model/nickname (when bike is set to public)
- Your bike's current odometer (for leaderboard ranking)
- Your bio, location, and connected social handles (if you fill them in)
Always private (only you can see):
- Service log entries, mod entries, fuel logs, mileage history, parts catalog
- Photos attached to logs
- Your email address
- Your subscription/payment status
You can flip your bikes between public and private anytime from the bike detail page.
Cookies and tracking
We use exactly one cookie-equivalent: an authentication token in your browser's localStorage. This is what keeps you logged in. We do not use Google Analytics, Facebook Pixel, or any third-party tracking.
Your rights
- Access — everything we have on you is visible inside your account
- Edit — change anything from your dashboard or account page
- Delete — delete a bike from its detail page (cascades to all its logs and photos). To delete your full account, email fun@endlessrally.com and we'll wipe it within 7 days
- Export — your parts library can be exported as CSV from any bike's parts tab. Full data export on request via email
Data retention and security
Your data is stored encrypted at rest by our database and storage providers. Photos uploaded to Cloudflare R2 are accessible via unguessable UUID URLs but are not behind authentication — please don't upload anything sensitive.
Database backups are kept for 7 days. Deleted accounts are removed from active databases within 7 days; backups age out within another 7 days.
Changes to this policy
If we change anything material, we'll update the date at the top and email registered users. Minor wording fixes won't trigger an email.
Questions
Email fun@endlessrally.com. We read everything.