Strava may show you personalized ads based on your personal information and may share your data with advertising partners for this purpose, though you can opt out.
This analysis describes what Strava's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Personal information shared with advertising partners for interest-based advertising can include behavioral and demographic data, and once shared with third parties the data is subject to those partners' own privacy practices.
Interpretive note: The specific categories of personal information shared with advertising partners are not enumerated, making it difficult to fully assess the scope of data flows involved in this provision.
Your personal information including activity and usage data may be shared with advertising partners to serve targeted ads on Strava; you can opt out of interest-based advertising through the Privacy Choices section of the policy or app settings.
How other platforms handle this
At Ledger, earning and maintaining our users' trust is a top priority. That's why we are deeply committed not only to protecting your privacy and securing your personal data, but also to being fully transparent about how we handle it.
src="https://trc.taboola.com/1142432/trc/3/json" ... src="https://www.googletagmanager.com/gtag/js?id=DC-15299257" ... src="https://tr.snapchat.com/config/com/af90c7f8-bd28-4988-b1ce-1711aad792f4.js" ... src="https://tr.snapchat.com/config/com/8fbe1595-8c5a-46b1-bbb2-66f3d57debde.js" ... src="https:...
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
Monitoring
Strava has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"We may display advertisements on our Services and those advertisements may be targeted to your interests based on your personal information. We may share your personal information with advertising partners for interest-based advertising purposes. You may opt out of interest-based advertising by visiting the advertising choices links in the Privacy Choices section.— Excerpt from Strava's Strava Privacy Policy
REGULATORY LANDSCAPE: This provision engages CCPA and CPRA, which require disclosure of third-party advertising data sharing and grant California residents the right to opt out of sale or sharing of personal information for cross-context behavioral advertising. GDPR requires a valid legal basis for sharing personal data with advertising partners, typically explicit consent for non-essential processing. The FTC Act applies to advertising disclosures and anti-deception standards. Enforcement authorities include the California Privacy Protection Agency, state attorneys general, and the FTC. GOVERNANCE EXPOSURE: Medium. The policy provides an opt-out mechanism for interest-based advertising, which aligns with CCPA requirements, but the scope of data shared with advertising partners is not enumerated in detail. Under GDPR, consent-based advertising data sharing must meet specificity and granularity requirements. The policy's use of broad language such as 'personal information' without specifying which categories are shared with advertising partners creates audit complexity. JURISDICTION FLAGS: California residents have a statutory right to opt out of sale or sharing under CPRA, and the Global Privacy Control signal must be honored. EEA and UK users require consent before personal data is shared with advertising partners for behavioral targeting. Colorado, Connecticut, and Virginia residents have opt-out rights under their respective state privacy laws. Users in states without comprehensive privacy laws have fewer statutory protections. CONTRACT AND VENDOR IMPLICATIONS: Data sharing agreements with advertising partners must specify permitted uses, data retention periods, and prohibitions on re-sharing. Compliance teams should audit whether advertising partner agreements reflect the stated opt-out commitments and include appropriate data processing terms. COMPLIANCE CONSIDERATIONS: The Global Privacy Control compliance posture should be assessed for California users. Consent management platform configurations should be reviewed to ensure advertising-related cookies and data flows are properly gated for EEA users. Regular audits of advertising partner data flows should be conducted to verify that opt-out signals are respected end-to-end.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Personal information shared with advertising partners for interest-based advertising can include behavioral and demographic data, and once shared with third parties the data is subject to those partners' own privacy practices.
Your personal information including activity and usage data may be shared with advertising partners to serve targeted ads on Strava; you can opt out of interest-based advertising through the Privacy Choices section of the policy or app settings.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Strava.