Legal

Privacy Policy

Last updated: 12 July 2026

This policy explains what personal data Fake My Stats collects, why, and the rights you have under the EU General Data Protection Regulation (GDPR).

1. Who is responsible (controller)

The data controller is Fake My Stats, Slovakia, contactable at support@fakemystats.com. Full details on our Legal Notice page.

2. What we collect and why

Data	Why	Legal basis
Email address	To link your purchase, give you access, and contact you about your order	Contract (Art. 6(1)(b))
Payment details	Processed by Stripe to take payment. We never see or store your full card number	Contract (Art. 6(1)(b))
Routes / workouts you build	Processed in your browser to generate your file. Not stored on our servers	Contract (Art. 6(1)(b))
Technical logs (IP, request time, errors)	Security, abuse prevention, keeping the Service running	Legitimate interest (Art. 6(1)(f))
Usage analytics (pages, visits, approx. location via Google Analytics)	Understand and improve how the site is used	Consent (Art. 6(1)(a)) — only if you Accept
Support messages / data requests	To answer you and handle GDPR requests	Contract / legal obligation

Your drawn routes and workouts are processed in your browser and turned into a file on the spot. We do not keep a database of the routes you create.

3. Who processes data on our behalf

We use trusted service providers ("processors") to run the Service. Some may process data outside the EU under appropriate safeguards (e.g. EU Standard Contractual Clauses):

Netlify — website hosting & serverless functions
Stripe — payment processing & subscription billing
Anthropic — AI that helps build gym workouts (receives your training inputs, not your identity)
Mapbox — map display for route drawing
ImprovMX — email routing for our support address
Google (Analytics) — measures site usage; runs only after you accept our cookie banner

4. How long we keep it

We keep order and billing records for as long as required by tax and accounting law (typically up to 10 years in Slovakia). Support messages are kept as long as needed to help you. Technical logs are kept for a short period. When data is no longer needed, we delete it.

5. Your rights

Under GDPR you have the right to:

Access — get a copy of your data;
Rectify — correct inaccurate data;
Erase — have your data deleted ("right to be forgotten");
Portability — receive your data in a portable format;
Restrict / object — limit or object to certain processing;
Withdraw consent — where processing is based on consent.

To exercise any of these, use our Data Request form or email support@fakemystats.com. We respond within one month.

6. Complaints

If you believe we've mishandled your data, you can complain to the Slovak supervisory authority: Úrad na ochranu osobných údajov SR (dataprotection.gov.sk), or the authority in your EU country of residence.

7. Cookies

Essential storage plus Google Analytics, which runs only after you accept our cookie banner. See our Cookie Notice.

8. Changes

We may update this policy; the "Last updated" date reflects the latest version.