Privacy Policy
Effective: Feb 20, 2026
nyc-rides.bike is operated by Pubcz LLC, a New York limited liability company ("we," "us"). This policy describes what data we collect, why, and what we do with it.
What We Collect
| Data | Why |
|---|---|
| Name, email, profile photo | Account creation and authentication via Google, Discord, or email sign-in |
| Username | Display identity on public rides |
| Strava activity data (distance, time, GPS traces) | Matching your Strava activities with rides on the platform |
| Ride content you post (title, description, route, start location) | Displaying rides to other users |
| Agreement acceptance records (timestamp, IP address, user agent) | Legal compliance — proof of acceptance |
| Usage and error data | Improving the platform and debugging problems |
We collect account information through OAuth providers (Google, Discord, Strava) when you sign in. We only request what we need for authentication and the features described above.
Cookies and Tracking
We use cookies for authentication (keeping you signed in) and analytics. Our analytics tools:
- PostHog — product analytics (how features are used)
- Vercel Analytics — performance monitoring
- Axiom — error tracking and debugging
We may in the future use additional analytics services, including Google Analytics or Meta, for advertising measurement. We will update this policy if that changes.
Who We Share Data With
Infrastructure providers. Vercel (hosting), PostHog (analytics), Axiom (error monitoring), and our email provider process data on our behalf to run the platform.
Other users. Your profile information is visible to other users when you join rides. Public rides are visible to everyone. Club members-only rides are visible to club members.
Clubs. When you join a club's ride, the club's organizers can see your profile information.
We do not sell your personal data. We may share aggregated, anonymized data (e.g., total rides posted, rider counts) that cannot identify you.
Google API Services Disclosure
We use Google OAuth to sign you in (name, email, profile photo). Our use of data received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only use Google data for authentication
- We do not use it for advertising or transfer it to third parties for advertising
- We do not use it beyond what is necessary to provide the sign-in feature
We send transactional emails related to your account and activity on the platform (e.g., ride notifications, agreement updates). We may in the future send occasional announcements or newsletters — you will be able to unsubscribe from non-transactional emails at any time.
Data Retention and Deletion
We keep your data while your account is active. You can request account deletion by emailing platform@nyc-rides.bike. When you request deletion:
- We delete your personal data (name, email, profile, ride content)
- We retain anonymized, aggregated data (e.g., ride statistics) that cannot identify you
- We retain agreement signature records (that you accepted the terms, when, and from what IP) for legal compliance
Children
nyc-rides.bike is for users 18 and older. We do not knowingly collect data from anyone under 18.
Changes
We may update this policy. For material changes, we will notify you through the platform. Continued use after changes constitutes acceptance.
Contact
Questions about this policy or your data? Email platform@nyc-rides.bike.