Privacy Policy

Last updated: March 30, 2026

1. Who we are

Run and Chill is a community sports group based in Munich, Germany. This platform ("checkin.runandchill.de") is operated to manage training session check-ins, leaderboards, and community engagement.

Contact: info@runandchill.de

2. What data we collect

When you create an account, we collect:

  • Name (first and last) — to identify you on the leaderboard and at sessions
  • Email address — for account login, password resets, and email verification
  • Password — stored securely using bcrypt hashing (we never store or see your plain password)

When you check in to a session, we collect:

  • Check-in timestamp
  • Device fingerprint — a non-identifying hash used solely to prevent duplicate check-ins from the same device per session
  • Friend referrals — names/emails of friends you bring (with your consent)

3. How we use your data

  • To operate the check-in and leaderboard system
  • To send you account-related emails (verification, password reset, session invitations)
  • To display your name and points on the leaderboard (visible only to logged-in members)
  • To prevent fraud (duplicate check-ins)

We do not sell, share, or transfer your data to third parties for marketing purposes.

4. Data storage

Your data is stored on Turso (SQLite cloud database) hosted in the EU (AWS eu-west-1). The website is hosted on Vercel. Emails are sent via goneo SMTP servers in Germany.

5. Cookies

We use a single signed session cookie ("rnc") to keep you logged in. We do not use analytics cookies, tracking pixels, or any third-party cookies.

6. Your rights (GDPR)

As a user in the EU, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and all associated data
  • Export your data in a portable format
  • Object to processing of your data

To exercise any of these rights, email info@runandchill.de.

7. Data retention

Your data is retained as long as your account is active. If you delete your account, all personal data is permanently removed. Check-in records may be retained in anonymized form for community statistics.

8. Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date.