STRATA uses account information to provide sign-in, cross-device syncing, planning, ratings, and personalized Discovery. It does not sell or rent personal data and does not currently use behavioral-advertising or analytics cookies.
1. Who handles your data
STRATA Fitness operates the STRATA website and account service. Privacy questions and data requests can be sent to stratafitness.official@gmail.com.
2. Account and fitness-profile data
When you create an account, STRATA stores your name, email address, account creation time, and a salted scrypt password hash. Your plaintext password is not stored.
STRATA also stores hashed session identifiers, session expiry information, weekly plans, training goals, experience level, available equipment, exercise preferences, optional movement constraints, exercise ratings, and relevant update timestamps. Individual ratings are connected to your account in storage but are shown to other users only as exercise-level aggregates. Your Discovery profile is not publicly displayed.
3. Payment information
When payments are enabled, Paddle handles checkout and payment information under its own privacy notice. STRATA may receive transaction, customer, product, entitlement, purchase-status, and refund information needed to provide Discovery access and support. STRATA does not receive or store full payment-card or bank-account details.
4. Technical information
The service temporarily uses an IP address for login and rating rate limits. Render and other infrastructure providers may process IP addresses, request times, requested URLs, browser or device headers, and error information to deliver, diagnose, and protect the service.
5. Why information is used
- To create and authenticate accounts
- To sync profiles and weekly plans across devices
- To calculate personalized Discovery results
- To calculate aggregated community ratings
- To provide paid access, receipts, support, and refunds when payments are enabled
- To prevent misuse, enforce request limits, and maintain service security
- To meet applicable legal obligations
Depending on the law that applies, STRATA relies on performing its agreement with you, taking steps you request before entering that agreement, legitimate interests in operating and protecting the service, compliance with legal obligations, or consent where consent is required. You may contact us with a question about the basis used for a particular activity.
6. Providers and external services
STRATA uses Render for application hosting and Turso for database hosting. When payments are enabled, Paddle handles checkout as merchant of record.
The public site loads fonts from Google Fonts and images from Unsplash, which may receive normal request information such as your IP address and browser headers. YouTube, research, and other external sites receive information when you follow their links. Those services apply their own privacy policies.
7. Cookies and device storage
STRATA uses one necessary account-session cookie. It is HttpOnly, SameSite=Strict, secure in production, and can remain valid for up to seven days. It is not an advertising or analytics cookie.
The installed PWA caches public pages and interface files on your device. Its service worker does not cache account APIs, authentication requests, private Discovery pages, or saved plan data.
8. Sharing and selling
STRATA does not sell or rent personal data. Information may be shared with the providers listed above, when legally required, or when reasonably necessary to protect users, enforce these Terms, and operate the service. STRATA does not currently use third-party behavioral advertising.
9. Retention
Active account data, plans, preferences, and ratings are retained while the account remains in use or until deletion is requested, subject to legal, security, and operational retention needs. Sessions expire after seven days. Hosting logs and payment records are retained under the relevant provider’s policies and legal obligations.
10. Your choices and rights
You may request access to, correction of, or deletion of your account data by emailing stratafitness.official@gmail.com. We may ask for reasonable proof that you control the account. Additional privacy rights may apply under the laws where you live.
11. Security
STRATA uses salted password hashing, hashed session tokens, secure production cookies, parameterized database queries, same-origin write checks, and rate limiting. No online service can guarantee absolute security. Use a unique password and contact us if you suspect unauthorized access.
12. International processing
Service providers may process information in countries other than the country where you live. Their contractual, organizational, and legal safeguards apply to that processing.
13. Children
STRATA is not directed to children who cannot legally consent to account-data processing where they live. A parent or guardian should supervise use by minors and make any purchase.
14. Changes and contact
Updates will be posted here with a revised date. Contact stratafitness.official@gmail.com with questions or requests. See the Terms of Service and Refund Policy for related information.