Strava · Strava Privacy Policy · View original document ↗

Flyby and Live Location Sharing with Other Users

High severity Unique · 0 of 343 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Strava Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Strava offers features like Beacon that share your live GPS location with other users in real time, and separately the Flyby feature shows when your activity route crossed paths with other users' routes.

This analysis describes what Strava's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

This provision establishes the operational framework for peer-to-peer location sharing functionality. It clarifies that Strava processes and transmits live location data only when users affirmatively enable sharing features, distinguishing this data practice from other location data uses.

Clause Stability Stable

0
Changes
3
Months Monitored
May 7, 2026
First Seen
May 7, 2026
Last Seen
This clause type exists across 967 other provisions on other platforms.

Consumer impact (what this means for users)

Features like Beacon (live location sharing) and Flyby (retrospective route crossing data) can expose your physical location to other Strava users, and if not reviewed and disabled, may share your location with strangers or unwanted contacts.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Opt Out of Arbitration
    In Strava privacy settings, navigate to 'Flyby' and set it to 'No One' to prevent others from seeing when your activity intersected with theirs. Review Beacon settings separately and only enable live location sharing when intentionally using the safety feature.

How other platforms handle this

Microsoft Azure Medium

Location data. Data about your device's location, which can be either precise or imprecise. For example, we collect location data using Global Navigation Satellite System (GNSS) (e.g., GPS) and data about nearby cell towers and Wi-Fi hotspots. Location can also be inferred from a device's IP address...

TikTok Medium

We also collect information about your approximate location based on your device and network information, such as SIM card region, IP address, and device system settings. We also collect information, such as tourist attractions, shops, or other points of interest, if you choose to add the location t...

Snapchat Medium

We collect information about your approximate and precise location. If you permit us to do so, we can collect your precise location from your device. We also use your IP address to determine your general location. You can use Snap Map to share your location with your friends and to see the locations...

See all platforms with this clause type →

Monitoring

Strava has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Start Monitor free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We also use your live location data, which you may choose to share with other users, such as when using Strava Beacon.

— Excerpt from Strava's Strava Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY FRAMEWORK: Real-time location sharing with third-party users implicates GDPR Art. 6(1)(a) consent requirements and Art. 9 where location reveals health patterns. Under CCPA/CPRA, live location data is sensitive personal information under §1798.140(ae)(1)(C). US state stalking and location tracking statutes (California Penal Code §646.9, Illinois Stalking laws) create a legal environment where inadequate safety controls on location sharing could expose Strava to liability. VAWA (Violence Against Women Act) and FTC guidance on intimate partner surveillance are relevant regulatory touchpoints. GDPR Art. 25 (privacy by design) requires that the most privacy-protective defaults be applied — defaulting Flyby to 'on' for all users would likely violate this principle.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Monitor free for 14 days

Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has issued guidance on location tracking and stalkerware, and has authority over unfair practices where platform features enable non-consensual location surveillance without adequate safety controls.
    File a complaint →

Applicable regulations

BIPA
Illinois, USA
CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
HIPAA
United States Federal
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Strava Privacy Policy
Entity
Strava
Document last updated
May 5, 2026
Tracking information
First tracked
May 7, 2026
Last verified
May 7, 2026
Record ID
CA-P-004932
Document ID
CA-D-00272
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
a0dee42f2c4ab44ff62ed59163cb495a9cd4b5c0dc733b68d4ce9c4b4cd0a61f
Analysis generated
May 7, 2026 14:19 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Strava
Document: Strava Privacy Policy
Record ID: CA-P-004932
Captured: 2026-05-07 14:19:58 UTC
SHA-256: a0dee42f2c4ab44f…
URL: https://conductatlas.com/platform/strava/strava-privacy-policy/flyby-and-live-location-sharing-with-other-users/
Accessed: July 4, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
High
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Compliance free trial

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Strava's Flyby and Live Location Sharing with Other Users clause do?

This provision establishes the operational framework for peer-to-peer location sharing functionality. It clarifies that Strava processes and transmits live location data only when users affirmatively enable sharing features, distinguishing this data practice from other location data uses.

How does this clause affect you?

Features like Beacon (live location sharing) and Flyby (retrospective route crossing data) can expose your physical location to other Strava users, and if not reviewed and disabled, may share your location with strangers or unwanted contacts.

Is ConductAtlas affiliated with Strava?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Strava.