Strava shares your personal data (excluding health data) with advertising partners to serve you targeted ads, both on and off the Strava platform.
Your behavioral, location, and demographic data can be shared with advertisers for targeted marketing, which affects your privacy beyond the Strava app itself.
Third-party advertising data sharing triggers CCPA/CPRA opt-out requirements for California residents, GDPR legitimate interest or consent obligations for EU/UK users, and FTC oversight for deceptive advertising practices; compliance teams should verify that opt-out mechanisms are functional and conspicuous.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Strava collects highly sensitive personal data including precise GPS location history, health metrics (heart rate, HRV, VO2max), and biometric data, which is used for AI training, advertising personalization, and aggregated into publicly visible features like the Global Heatmap. Your activity data may be shared with third-party advertising partners, though Strava commits not to use health data for advertising. You can adjust your data sharing and visibility settings by navigating to Privacy Controls in the Strava app settings, and can request data deletion by visiting strava.com/athlete/delete_your_account.