This Privacy Policy explains how Staka, LLC ("Staka," "we," or "us") collects, uses, discloses, and protects personal information when you use the Staka iOS application, the staka.ski website, and every related service we operate (together, the "Service"). In short: we collect what the game needs, your email, the profile you enter, and the workout data your SkiErg produces. Staka is a shared world, so other skiers see your name, flag, rank, and results. We do not sell personal information, we show no ads, and we use no third-party trackers. This overview is for convenience; the sections below control.
1. WHO WE ARE
The Service is operated by Staka, LLC, a New Hampshire limited liability company at 221 Main St #4218, Nashua, NH 03060, USA. Staka, LLC is the party responsible for your personal information and the "data controller" where that term applies. Contact: [email protected].
2. PERSONAL INFORMATION WE COLLECT
We collect the following categories of personal information:
a. Identifiers: your email address, first and last name, and the internal account identifiers we assign. Sign-in is passwordless; we send a one-time code instead of storing a password.
b. Protected classifications: a gender category (used for groupings such as M30 and W40) and your year of birth.
c. Body measurements and health information: weight and height, which drive the simulation's physics, a history of changes to them, kept to protect fair racing, and heart rate, only if you connect a heart-rate monitor.
d. Activity and performance records: output from your SkiErg and your sessions, such as power, cadence, speed, distance, duration, calories, splits and power curves, segment and KOM times, race times and placements, your rank, and the activity files that store your sessions.
e. Technical and usage information: device model, app version, language, timezone, sign-in and activity timestamps, the IP address your device connects from, and server logs of the Service's operation.
f. Optional integration data: if you connect Strava, the authorization, which is stored on your device, and the activity files you choose to send.
Your country is taken from your device's region setting. The Service is currently free, so we collect no payment information; if we add paid features, this Policy will be updated first.
What we do not collect: GPS or precise location, contacts, photos, microphone or camera data, browsing history, advertising identifiers, and biometric identifiers. The heart-rate figures the Service shows are workout estimates for a game, not medical measurements.
3. SOURCES OF PERSONAL INFORMATION
We collect personal information directly from you (what you type into your profile), from the equipment you choose to connect (your SkiErg and, optionally, a heart-rate monitor), from your use of the Service itself (results, times, ranks, and logs generated by skiing), and from your device's settings (region, language, timezone, model). We do not buy personal information, and we do not collect it from data brokers, social networks, or advertising platforms.
4. WHY WE COLLECT AND USE PERSONAL INFORMATION
We use the categories above to:
a. create and operate your account and sign you in;
b. run the simulation, which converts your effort and body measurements into speed on snow;
c. operate multiplayer, races, leaderboards, and rankings;
d. protect competitive integrity, including reviewing effort data and body-metric changes for manipulation;
e. send service messages, such as sign-in codes and notices about your account, and things you ask to be told about;
f. send you news about Staka, such as new features, trails, and events; every news email includes a way to opt out, and opting out never affects service messages;
g. secure, debug, and improve the Service; and
h. comply with law and enforce our Terms of Service.
We do not use personal information for automated decisions that produce legal or similarly significant effects, and we do not use sensitive personal information for any purpose other than providing the Service.
5. WHAT OTHER SKIERS SEE
Staka is a shared sporting world, and results are part of the sport. Other skiers see:
a. your display name (surname and first name), country flag, rank, and kit colors;
b. your skier on course while you ski with others: position, speed, and skiing motion;
c. your race times and placements, and your segment and KOM leaderboard times; and
d. if you race, a results sheet shared with the field, showing each finisher's summary figures, such as average power, heart rate, weight, and height.
Other skiers never see your email. To make the shared world work, the data that runs your session travels through our servers and to other players' devices. If you would rather not share heart rate, do not connect a heart-rate monitor; you can disconnect it at any time.
6. CONSUMER HEALTH DATA, INCLUDING HEART RATE
Heart rate and measurements about your body and effort, where you choose to share them, may be treated as "consumer health data" under laws such as Washington's My Health My Data Act. We collect heart rate only when you connect a heart-rate monitor. We use it to run your workout and record your sessions, and, if you race, your average heart rate appears on the race results sheet shared with the field, as described above. We do not sell consumer health data, we do not use it for advertising, and we do not share it with third parties for their own purposes. We have no affiliates. Connecting a heart-rate monitor is how you consent; you can stop at any time by disconnecting it, and you can withdraw consent and request deletion by deleting your account in the app or emailing [email protected]. If we decline a request relating to consumer health data, you may appeal by replying to our response; if your appeal is unsuccessful, you may contact the Washington State Attorney General. Our full Consumer Health Data Privacy Policy is at /health-data.
7. HOW WE DISCLOSE PERSONAL INFORMATION
We disclose personal information only as follows:
a. Service providers: companies that operate infrastructure on our behalf, such as hosting, data storage, and email delivery. They may process personal information only to provide those services to us and are required to protect it.
b. Other skiers: as described in Section 5.
c. At your direction: if you connect Strava, we send the activity files you ask us to send; uploads appear on Strava under your own Strava account settings.
d. Legal and safety: where required by law, to respond to lawful requests, or to protect the rights, property, or safety of Staka, our skiers, or others.
e. Business transfers: as part of a merger, acquisition, financing, or sale of the company or the Service, in which case this Policy continues to apply to the transferred information.
We have no affiliates, and we do not disclose personal information to data brokers, advertising networks, or analytics companies.
8. WE DO NOT SELL OR SHARE PERSONAL INFORMATION
We do not sell personal information under any definition, including the broad definitions in state privacy laws, and we have not done so. We do not share personal information for cross-context behavioral advertising, we do not use targeted advertising, and we do not permit third parties to collect personal information through the Service for their own purposes. Because there is no sale or sharing to opt out of, universal opt-out signals such as the Global Privacy Control do not change how the Service treats you; we mention them so you know where you stand. The website does not respond to Do Not Track signals because it does not track you in the first place.
9. COOKIES, ANALYTICS, AND TRACKING
The website sets no advertising or analytics cookies and loads no third-party trackers, tracking pixels, or advertising scripts. We use only the storage needed to keep you signed in and remember your preferences. The app contains no third-party advertising or analytics software.
10. HOW LONG WE KEEP PERSONAL INFORMATION, AND DELETING YOUR ACCOUNT
We keep personal information while your account is active so your training log and race record work over time. Sign-in codes expire within minutes of being issued. You can permanently delete any individual free ski or workout, which also deletes its activity file. Race results cannot be deleted one by one, because a race is part of every entrant's history.
You can delete your whole account at any time in the app: Settings, then Delete Account. You can also email [email protected] from your account address. Deletion cannot be undone: your profile, activity history and files, segment and KOM times, body-metrics history, signed-in devices, and waitlist entries are deleted. Races you finished stay on other skiers' results as "Account Removed," with your identity and effort figures removed. Copies in routine backups persist for a limited period before being replaced on a rolling schedule, and we retain information where the law requires it.
11. YOUR PRIVACY RIGHTS AND HOW TO EXERCISE THEM
We honor the following rights for every skier, regardless of where you live:
a. Know and access: ask whether we process your personal information and receive a copy of it.
b. Portability: your activity files are standard files you can export and take anywhere.
c. Correct: fix inaccurate profile information, which you can do yourself in the app, or ask us to.
d. Delete: delete individual activities or your whole account, as described in Section 10.
e. Opt out of sale, sharing, and targeted advertising: there is nothing to opt out of, because we do none of these, and we will not start without updating this Policy first.
f. Non-discrimination: exercising your rights never changes the price, quality, or availability of the Service.
To exercise a right, use the controls in the app or email [email protected] from your account email address. Because sign-in is passwordless, a request sent from your account address is how we verify it is you; if we cannot verify a request, we will tell you why. We respond within the time the law requires, generally within 45 days. If we decline a request, we will explain why, and you may appeal by replying to our response. An authorized agent may submit a request on your behalf with your signed permission; we will confirm the request with you directly.
12. USERS IN THE EEA AND UK
Where the GDPR or UK GDPR applies, Staka, LLC is the data controller, and our legal bases are: performance of our contract with you (operating your account, recording activity, calculating results, and running multiplayer and leaderboards); our legitimate interests (securing and improving the Service, keeping competition fair, and telling you about Staka); your consent, for optional features such as heart rate and Strava, which you may withdraw at any time; and compliance with legal obligations. We are based in the United States, and your information is processed there and in other countries; where the law requires safeguards for international transfers, we rely on them, including approved contractual protections. You may lodge a complaint with your local data protection authority, though we would appreciate the chance to resolve your concern first at [email protected].
13. CHILDREN
Staka is not directed to children under 13, and we do not knowingly collect their information. If you believe a child under 13 has provided information, email [email protected] and we will delete it. Where local law sets a higher age of consent, that age applies.
14. SECURITY
We use reasonable measures appropriate to the nature of the information we process, including encryption in transit, passwordless sign-in, credentials stored only in hashed form, and access controls that limit each account to its own data. No system is completely secure, and no security program can eliminate all risk, but we work to keep yours safe.
15. ACCESSIBILITY
If you need this Policy in another format, contact [email protected] and we will provide it.
16. CHANGES TO THIS POLICY
We may update this Policy. When we do, we will post the updated Policy on this page and change the "Last updated" date; for material changes, we will also give notice in the app, by email, or on the website. The latest version is always posted here.
17. CONTACT
Staka, LLC
221 Main St #4218
Nashua, NH 03060
USA
[email protected]