Strava provides privacy controls allowing users to set who can see their activities and data, including options for 'Everyone,' 'Followers,' or 'Only Me' — but the policy notes that some features like the Global Heatmap and Flyby use data from activities regardless of these settings unless separately opted out.
This analysis describes what Strava's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes the baseline visibility configuration for user-generated content, requiring users to affirmatively adjust privacy settings to restrict visibility beyond the default public setting. The clause clarifies that default visibility extends to search engine indexing and non-registered viewers, not only authenticated Strava users.
Setting your Strava activities to 'Only Me' does not fully protect your data — separate opt-outs are required for the Global Heatmap, Flyby, and other features that use your GPS data regardless of your activity visibility setting.
How other platforms handle this
Depending on where you live, you may have certain rights regarding your personal information. These may include the right to access, correct, or delete your personal information; the right to restrict or object to our processing of your personal information; the right to data portability; and the ri...
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
enableGpcSdk: true, gpcSetting: { privacyPolicyLink: '/Privacy-Security-Policy-a-282.html' }
Monitoring
Strava has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are 18 years or older, certain information, including your profile and your activities, is set by default to be viewable by "Everyone." "Everyone" includes Strava users and the public, including search engine results. Subject to your privacy controls, your information, including parts of your profile, username, photos/videos, information and content you share may be viewable on Strava or to non-registered users.— Excerpt from Strava's Strava Privacy Policy
(1) REGULATORY FRAMEWORK: Privacy control design implicates GDPR Art. 25 (data protection by design and by default — controls must be set to the most privacy-protective setting by default), GDPR Art. 7 (consent must be freely given, specific, informed, and unambiguous — complex layered opt-outs may not satisfy this standard), CCPA/CPRA §1798.121 (right to limit use of sensitive personal information), and FTC guidance on dark patterns in privacy control design (FTC Report: Bringing Dark Patterns to Light, 2022). (2)
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes the baseline visibility configuration for user-generated content, requiring users to affirmatively adjust privacy settings to restrict visibility beyond the default public setting. The clause clarifies that default visibility extends to search engine indexing and non-registered viewers, not only authenticated Strava users.
Setting your Strava activities to 'Only Me' does not fully protect your data — separate opt-outs are required for the Global Heatmap, Flyby, and other features that use your GPS data regardless of your activity visibility setting.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Strava.