Privacy Policy

Information we collect

Account information

If you sign in (for example to submit a team, or as an administrator), authentication is handled by Auth0. Depending on how you sign in, we receive your email address, name, and, if you use a social login, whatever basic profile info that provider shares. We store this alongside an internal role (regular user or admin) and whether your account is active.

Team and group listings

When you submit a team, club, or group ride, you provide the details that make up the public listing: name, description, location, ride details, and any contact information you choose to include (email, phone, website, social links). You control what contact information, if any, goes on a public listing.

Contact form

If you use the contact form, we collect the name, email address, and message you provide, so we can reply to you.

Automatically collected information

We temporarily log your IP address to enforce rate limits that prevent spam and abuse (for example, limiting how many team submissions or location searches can come from one address in a short window). These records are short-lived and routinely cleaned up; they are not used to track you across the site or build a profile of you.

If you choose to accept analytics cookies, we also use Google Analytics to understand how the site is used (pages visited, general location derived from IP address, device and browser type, how you arrived at the site, and how you interact with it, such as which steps of a form you reach and the choices you make in the get-started quiz, but not your ZIP code or any contact details). We don’t enable Google Signals or link this data to Google Ads, so it isn’t used for cross-site advertising or to build ad profiles about you.

Location search

When you search by city, ZIP code, or state, we match your search text against a public geographic database (U.S. Census Bureau place data and GeoNames). We do not access your device’s precise location, and the site does not request geolocation permissions.

How we use information

• To operate and display team, club, and group ride listings.
• To authenticate accounts and determine what actions you’re allowed to take (for example, admin review of submissions).
• To send transactional email about your submission, such as approval or rejection notices, and to respond to messages sent through the contact form.
• To detect and prevent spam, abuse, and automated submissions.
• To maintain, secure, and improve the site.
• To understand aggregate site usage and improve the experience, via Google Analytics, if you accept analytics cookies.

We do not sell your information, and we do not use it for advertising. We do not run ad-tracking scripts on this site.

What’s public

Approved team, club, and group ride listings are publicly visible on the site, including any contact details the submitter chose to include on that listing. If you submitted a listing and want contact information removed or changed, or want the listing removed entirely, contact us at support@spokeandcircle.com.

Sharing with service providers

We share information with the third-party services that run the site, only as needed to provide it:

• Auth0: authentication and account sign-in.
• Resend: delivery of transactional email (approval, rejection, and contact-form replies).
• Neon: our database, where account and listing data is stored.
• Vercel and Cloudflare: application hosting, content delivery, and network security.
• Google Analytics: aggregate site usage statistics.

These providers process information on our behalf and are not permitted to use it for their own purposes. We may also disclose information if required by law, or to protect the security of the site.

Data retention

We keep account and listing data for as long as your account or listing is active. If a listing owner requests removal, the listing is scheduled for deletion rather than removed instantly, so an accidental request can be undone within a short window before it is permanently deleted. Rate-limit records are deleted automatically after they expire.

Cookies

We use cookies necessary to keep you signed in (managed by Auth0) and to protect the site during login. These are required for the site to work and are always on.

Google Analytics cookies, which measure site usage in aggregate, are optional. They stay off, and Google Analytics does not load, unless you choose “Accept all” in the cookie notice. If you choose “Necessary only”, or your browser sends a Global Privacy Control signal, we don’t load Google Analytics. You can change your choice at any time with the “Cookie settings” link in the footer; withdrawing consent turns Google Analytics off and clears its cookies from your browser. We remember your choice in your browser’s local storage. We don’t use advertising or cross-site tracking cookies.

To be able to show that you agreed, when you accept analytics (or later withdraw that choice) we keep a record containing a random identifier generated in your browser, whether you accepted or withdrew, the date and time, and the version of this policy you saw. It is not linked to your name, email address, or account, and we keep these records for four years.

Children’s privacy

Spoke & Circle is not directed at children under 13, and we do not knowingly collect personal information from children under 13. Some listings describe youth cycling programs, but those listings are informational only. Submitting or browsing a listing is not something we expect a child to do themselves.

Your choices

You can ask us to access, correct, or delete the personal information we hold about you, or ask us to remove a listing, by emailing support@spokeandcircle.com.

Your California privacy rights (CCPA/CPRA)

If you’re a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), gives you additional rights over the personal information we hold about you.

Categories of personal information we collect

In the past 12 months, we’ve collected:

• Identifiers: name, email address, and IP address.
• Internet or network activity: IP address and request metadata used to enforce rate limits, and site usage data (pages visited, device/browser type, referring site, and interactions such as which form steps you reach) collected via Google Analytics.
• Information you submit: team/group listing details and contact-form messages.

We do not collect sensitive personal information (such as precise geolocation, government IDs, or financial account details), and we do not use personal information to make automated decisions that produce legal or similarly significant effects.

Your rights

• Right to know what personal information we’ve collected about you and how it’s used.
• Right to delete personal information we hold about you, subject to certain legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing. We don’t sell personal information, and Google Analytics is configured without Google Signals or Google Ads linking, so we don’t share personal information for cross-context behavioral advertising. There’s nothing to opt out of today.
• Right to non-discrimination for exercising any of these rights.

To exercise any of these rights, email support@spokeandcircle.com. We may need to verify your identity before completing a request (for example, by confirming it comes from the email address on file). You may also designate an authorized agent to make a request on your behalf.

Changes to this policy

If we make material changes to this policy, we’ll update the effective date above.

Contact us

Questions about this policy? Email support@spokeandcircle.com.