Privacy

Last updated: October 2026

Controller

The Runcade app

Runcade reads workouts and health data (for example runs, heart rate, VO2max, resting heart rate) from Apple Health once you allow it in iOS. All analysis happens on your iPhone. The app has no account, no server of its own, no ads and no tracking. No data is sent to me or to third parties.

Notifications after a run and reports are created on the device. If you export or share a run yourself (for example as an image or GPX file), you decide where the data goes using the iOS share sheet.

This website

Hosting

The website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA, and served from servers in the EU (Frankfurt). When you visit, Vercel processes technically necessary data in server logs: IP address, date and time, requested address, referrer and user agent. This is needed to run the site securely and reliably (Art. 6 (1) (f) GDPR). A data processing agreement with Vercel is in place. Vercel is certified under the EU-US Data Privacy Framework.

Analytics with Plausible

To count visits I use Plausible Analytics, running on my own server at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, data centre in Nuremberg. Plausible sets no cookies and stores no personal data. A daily changing, irreversible hash is derived from the IP address and user agent; the IP address itself is not stored. Recorded are page views, referrer, country, device type and browser, and which theme is selected and whether the App Store link is clicked. The legal basis is Art. 6 (1) (f) GDPR; the legitimate interest is understanding how the website is used.

Browser storage

The selected theme and whether you closed the language hint are kept in your browser's local storage. This never leaves your browser and can be deleted at any time in your browser settings (§ 25 (2) no. 2 TDDDG).

Fonts

All fonts are served by this website itself. No external font services or other third-party services are used.

Your rights

You have the right of access, rectification, erasure and restriction of processing, the right to data portability and the right to object (Art. 15 to 21 GDPR). Just send me an email. You can also lodge a complaint with a data protection supervisory authority.