Strava uses your recorded activity routes to contribute to a publicly visible Global Heatmap that shows where people are exercising around the world.
This analysis describes what Strava's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Even aggregated or 'deidentified' location data has been shown to expose sensitive locations such as military bases or private residences, creating real-world safety and privacy risks.
Cross-platform context
See how other platforms handle Global Heatmap and Aggregated Location Data and similar clauses.
Compare across platforms →The aggregation of GPS data into public-facing products raises concerns under GDPR recital 26 regarding the adequacy of anonymisation, and may create liability if deidentification is reversed; risk teams should assess whether opt-out mechanisms are …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
Even aggregated or 'deidentified' location data has been shown to expose sensitive locations such as military bases or private residences, creating real-world safety and privacy risks.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Strava.