Privacy
Signing in
Velorido rides online, so you sign in before you ride. Sign-in is handled by Logto, our authentication provider, in your web browser, with Google, Apple or an email address. Logto receives the account details you sign in with. We receive only an account identifier: we do not read your email address or your name. Other riders see you under a name made from that identifier.
On your device
Your ride recordings (power, cadence, speed, elevation and heart rate, second by second), your settings (weight, FTP and kit), the Bluetooth devices you have paired, the TCX files you export and the app's own log stay on your device. Your sign-in is kept in your system's keychain. On Android, and on a Linux desktop with no keyring running, it is kept instead in a file only the app can read.
Heart rate
Heart rate from a strap is never sent to us or to other riders. It is shown on your screen and saved in your recordings and exported files, on your device only.
During a ride
While you ride, our game server receives your weight, your FTP if you have set one, your kit, and your power and cadence as you pedal, so it can work out your speed and where you are on the road. Other riders on the same road see your position, speed, power, cadence, name, kit and level, and your FTP if you have set one. Your weight is not shown to them. The server holds this only for the length of the ride and does not store it. Its log records your account identifier, your name and which road you rode.
What we keep about your account
Under your account identifier we keep the progress you earn (XP, Cols and your level), the kit you have unlocked, and a record of your rides: when each began and ended, which game server it was on, and how many minutes you spent moving each day and each week. We keep no power, speed or position from your rides.
Bug reports
When you use Report a problem, we receive what you write, your account identifier and name, and details that help us find the fault: your operating system and its version, the app's version, the screen you were on, the road you were riding and the name of your trainer, and the most recent part of the app's performance log, which records how smoothly the game drew and how long roads took to load. Nothing is sent unless you send a report.
Usage counts in the app
Unless you turn it off, the app tells us how it is used, through the same Umami we run ourselves for this site: when it is opened, with its version and your operating system; which screens are shown and for how long; which of its buttons are pressed and which settings are changed, and to what; and for each ride, the road, the kind of ride, whether it was on a real trainer, whether virtual gears were on, how many minutes it lasted and how it ended. Each count also carries your screen size and your system's language. Umami works out your country from your IP address and does not store the address. None of them carries your account identifier or your name, and they are not linked to your account. You can turn them off in Settings, under Share anonymous usage, and from then on nothing is sent.
Where it runs
The game server and our account service (api.velorido.com) run on Hetzner, in Nuremberg, Germany. Requests to them are logged, including your IP address, so we can keep them secure and find faults. What we keep about your account is stored in a Postgres database run by Neon, in Frankfurt, Germany. Logto runs its own hosted service. This website and our domain names are served by Bunny, a European content delivery network.
This website and the demo
This site, and the demo at demo.velorido.com, count visits using Umami, an analytics tool we run ourselves on our own server. On the demo it also counts which worlds are watched, for how long, and which of the demo's controls are used. On this site it also counts which links and buttons are pressed, how far down a page is scrolled, which sections come into view, and how long a page stays open. On both the site and the demo, Umami sets no cookies, stores no personal data, and does not follow you to other sites. Because it sets no cookies and does not identify you, there is no consent banner.
Feedback from the site and the demo
When you choose Send feedback on this site or in the demo, what you write goes to opini, the service we use to read feedback, together with the page or world you were on, your screen size and your browser. From the demo it also carries the demo's version and graphics settings and, when you report a problem, its recent frame rate. Nothing is sent unless you press Send. On this site you can also add your email address if you want a reply. It is sent with your message only if you fill it in, and we use it only to answer you.
What we do not do
No advertising, no tracking across other sites, and no selling or sharing of your data with anyone beyond the services named on this page.
Your account and your rights
You can ask to see what we hold about you, or to have your account deleted, by writing to the address on the imprint page. We then delete your account from our sign-in service, and erase everything our database holds under it: your progress, your kit, your ride records and your bug reports. Your recordings stay on your device until you delete them.