Privacy Policy

Last updated: 20 June 2026

This Privacy Policy explains how FrameItOrDidntHappen (“we”, “us”), the operator of FrameItOrDidntHappen (the “Service”), collects and uses your information when you turn your Strava activities into poster artwork.

Information we collect

• Strava account data. With your permission (via Strava OAuth), we access your name and the activities you choose to frame — including the GPS route, distance, moving time, pace, elevation, and, where available, heart rate and calories.
• A copy of your activity list. So your activities load quickly and stay available between visits, we store the list Strava gives us — each activity's name, sport, date, route and stats. It is kept in step with Strava while you stay connected, and deleted when you disconnect (see “Data retention”).
• Authentication tokens. We store the Strava access and refresh tokens needed to fetch your activities on your behalf.
• Order data. When you buy a poster, payment is processed by Stripe; we store an order record, your email address, and a download token so we can email you the link and let you re-download it later. If you order a printed poster, we also store the delivery address you provide, so we can print and ship it. We never receive or store your card details.
• Technical data. A session cookie keeps you signed in. We do not use advertising or cross-site tracking cookies.

How we use your information

We use your information only to operate the Service: to fetch the activity you select, render your poster, deliver your download, ship any printed poster you order, and provide support.

Legal bases (where GDPR applies)

We rely on your consent (connecting Strava) and on performance of a contract (fulfilling your order).

Sharing and third parties

We do not sell your personal data. We share it only with the providers needed to run the Service:

• Strava — the source of your activity data.
• Stripe — payment processing.
• Cloudflare R2 — storage of your generated poster files.
• Resend (resend.com) — sending your download link by email.
• Railway — application hosting and the database where order records and Strava tokens are stored.
• Cloudflare — DNS, content delivery, and email routing for our contact addresses.

Data retention

We keep your Strava tokens and our copy of your activity list while your account is connected; you can disconnect at any time. When you revoke our access from your Strava settings, Strava tells us, and we delete your name, your tokens and every stored activity — automatically, and without you having to ask. Posters you have already bought are not affected: they stay yours to download. Your purchased poster stays available to download for 6 months after purchase; after that the stored file is deleted and the download link stops working, so please save your poster within that window. Order records themselves (including any delivery address you provided for a printed poster) are retained for as long as applicable law requires — in the Netherlands, generally seven years for tax and accounting purposes — after which they are deleted or anonymised.

Your rights and choices

You may request access to, correction of, or deletion of your data by contacting contact@frameitordidnthappen.com. You can revoke FrameItOrDidntHappen's access to Strava at any time from strava.com/settings/apps.

Security

Data is transmitted over HTTPS and tokens are stored securely. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

Changes to this policy

We may update this policy; we will revise the “last updated” date above when we do.

Contact

Questions? Contact us at contact@frameitordidnthappen.com.