Strava · Strava Privacy Policy · View original document ↗

Targeted Advertising Using Personal Information

Medium severity Medium confidence Explicitdocumentlanguage Unique · 0 of 325 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Strava Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.
Document Record

What it is

Strava may show you personalized ads based on your personal information and may share your data with advertising partners for this purpose, though you can opt out.

This analysis describes what Strava's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Personal information shared with advertising partners for interest-based advertising can include behavioral and demographic data, and once shared with third parties the data is subject to those partners' own privacy practices.

Interpretive note: The specific categories of personal information shared with advertising partners are not enumerated, making it difficult to fully assess the scope of data flows involved in this provision.

Consumer impact (what this means for users)

Your personal information including activity and usage data may be shared with advertising partners to serve targeted ads on Strava; you can opt out of interest-based advertising through the Privacy Choices section of the policy or app settings.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Close Your Account
    Log in to Strava and go to your Privacy Controls at strava.com/athlete/privacy. Locate the advertising or Privacy Choices section and follow the opt-out links for interest-based advertising to stop your data from being shared with advertising partners.

How other platforms handle this

Starbucks Medium

We share personal information with third-party advertising and marketing partners, and with social media companies, to provide you with targeted ads, promotions, and offers both on and off our platforms. Under California law, some of these disclosures may constitute a 'sale' or 'sharing' of personal...

Groq Medium

There is certain information that we collect automatically from your use of our online Services and from your device(s) used to access those Services, for example by using the types of technologies discussed in the 'Online Analytics' section below. This information includes your IP address, page vie...

Whatnot Medium

We may share your personal information with third-party advertising partners to provide you with advertisements we believe you may find of interest. We do not control these third parties' tracking technologies or how they may be used. If you have questions about an advertisement or other targeted co...

See all platforms with this clause type →

Monitoring

Strava has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visiting the advertising choices links in the Privacy Choices section.

— Excerpt from Strava's Strava Privacy Policy

ConductAtlas Analysis

Institutional analysis (Compliance & governance intelligence)

REGULATORY LANDSCAPE: This provision engages CCPA and CPRA, which require disclosure of third-party advertising data sharing and grant California residents the right to opt out of sale or sharing of personal information for cross-context behavioral advertising. GDPR requires a valid legal basis for sharing personal data with advertising partners, typically explicit consent for non-essential processing. The FTC Act applies to advertising disclosures and anti-deception standards. Enforcement authorities include the California Privacy Protection Agency, state attorneys general, and the FTC. GOVERNANCE EXPOSURE: Medium. The policy provides an opt-out mechanism for interest-based advertising, which aligns with CCPA requirements, but the scope of data shared with advertising partners is not enumerated in detail. Under GDPR, consent-based advertising data sharing must meet specificity and granularity requirements. The policy's use of broad language such as 'personal information' without specifying which categories are shared with advertising partners creates audit complexity. JURISDICTION FLAGS: California residents have a statutory right to opt out of sale or sharing under CPRA, and the Global Privacy Control signal must be honored. EEA and UK users require consent before personal data is shared with advertising partners for behavioral targeting. Colorado, Connecticut, and Virginia residents have opt-out rights under their respective state privacy laws. Users in states without comprehensive privacy laws have fewer statutory protections. CONTRACT AND VENDOR IMPLICATIONS: Data sharing agreements with advertising partners must specify permitted uses, data retention periods, and prohibitions on re-sharing. Compliance teams should audit whether advertising partner agreements reflect the stated opt-out commitments and include appropriate data processing terms. COMPLIANCE CONSIDERATIONS: The Global Privacy Control compliance posture should be assessed for California users. Consent management platform configurations should be reviewed to ensure advertising-related cookies and data flows are properly gated for EEA users. Regular audits of advertising partner data flows should be conducted to verify that opt-out signals are respected end-to-end.

Full compliance analysis

Regulatory citations, enforcement risk, and due diligence action items.

Track 1 platform — free Try Watcher free for 14 days

Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.

Applicable agencies

  • FTC
    The FTC has authority over unfair or deceptive advertising practices and the adequacy of opt-out mechanisms for interest-based advertising
    File a complaint →
  • State AG
    California and other state attorneys general have enforcement authority over advertising data sharing under CCPA, CPRA, and analogous state privacy laws
    File a complaint →

Applicable regulations

BIPA
Illinois, USA
CCPA/CPRA
California, USA
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
HIPAA
United States Federal
UK GDPR
United Kingdom

Provision details

Document information
Document
Strava Privacy Policy
Entity
Strava
Document last updated
May 5, 2026
Tracking information
First tracked
May 9, 2026
Last verified
May 9, 2026
Record ID
CA-P-007786
Document ID
CA-D-00272
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
1f04cde7030a965e9a65ea78be50fec4717b7bbf6a378112228c49d14a8f6010
Analysis generated
May 9, 2026 22:52 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Strava
Document: Strava Privacy Policy
Record ID: CA-P-007786
Captured: 2026-05-09 22:52:22 UTC
SHA-256: 1f04cde7030a965e…
URL: https://conductatlas.com/platform/strava/strava-privacy-policy/targeted-advertising-using-personal-information/
Accessed: May 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Professional Governance Intelligence

Need to monitor specific governance provisions?

Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Start Professional free trial

Or start with Watcher →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Strava's Targeted Advertising Using Personal Information clause do?

Personal information shared with advertising partners for interest-based advertising can include behavioral and demographic data, and once shared with third parties the data is subject to those partners' own privacy practices.

How does this clause affect you?

Your personal information including activity and usage data may be shared with advertising partners to serve targeted ads on Strava; you can opt out of interest-based advertising through the Privacy Choices section of the policy or app settings.

Is ConductAtlas affiliated with Strava?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Strava.