Your data

Privacy Policy

Effective 5 August 2026

OpenCycle is built to know as little about you as it can get away with. Your rides stay on your machine, an account is optional and holds a handful of fields, and there is no analytics, no advertising and nothing sold to anyone. This page says exactly what does leave your browser, when, and why.

What stays on your machine

By default, everything. Your rider, your settings, your FTP, your workouts and the worlds you make are stored in your browser's local storage on your own device. Data from a paired trainer, power meter, cadence sensor or heart-rate strap is read over Bluetooth and processed in the browser, live. When you save a ride it is written as a .fit file to your machine, and nothing is uploaded from here — what you do with the file is your business.

What we don't do

• No analytics and no trackers — first party or anyone else's.
• No advertising, and no advertising identifiers.
• No selling or renting of data, because there is nothing to sell.
• No cookies at all until you sign in, and exactly one when you do — described below.

Serving the site

Like every website, opencycle.net is delivered by servers that see your IP address and the pages you request; our hosting infrastructure processes these transiently in ordinary access logs, used only to deliver the site and defend it against abuse. They are not used to profile you.

Riding with friends

A shared ride works by relaying your position along the road, your speed, your display name and your rider's appearance through our server to the people in your ride — that is the entire feature, and the people you invited can see those things because that is what riding together means. Updates are relayed, not recorded: the server keeps no history of where you rode or how hard. A ride link admits whoever holds it, so share it with the people you want on your road.

If you create an account

An account is optional, and exists to keep a small profile across browsers. It holds, in full:

• your username — the name other riders see;
• your password, stored only in hashed form — we cannot read it;
• an optional email address, used to get you back in if you forget your password — and, only if you ticked the box asking for it, for occasional news about OpenCycle and its sister app Transition, every one of which carries an unsubscribe link;
• your rider's appearance and your FTP;
• two yes-or-no facts: whether you asked for that news, and which version of the terms you accepted when you signed up.

That is the whole record. An OpenCycle account deliberately holds no training log: your rides are not uploaded to it and never have been.

Signing in sets one cookie — an HttpOnly session cookie on opencycle.net, which is what keeps you signed in. It identifies your session and nothing else, and it is the only cookie OpenCycle sets.

Deleting your account from the account tab removes the record above and releases your name. It takes effect immediately and cannot be undone.

If you connect a coaching platform

You can link your OpenCycle account to a coaching platform, and the link is only made when you approve it on our consent screen. Once connected, the platform sends OpenCycle your planned session so it can appear in your workouts, and when you finish a ride the file is handed back to the platform. The file is passed on and swept — OpenCycle does not keep a copy, and does not see your training history on the platform. The platform sees nothing else about your OpenCycle account. You can disconnect at any time from the Coaching tab, or from the platform's side; what the platform keeps is governed by its own privacy policy.

Worlds you make with an AI

Describing a world hands you a prompt to paste into whatever AI chat you already use. OpenCycle sends nothing to any AI provider — the conversation happens between you and them, under their terms — and what comes back is stored in your browser like any other world.

Where this happens

OpenCycle is operated by Storybooks LLC — the company behind Transition — from the United States, and account data is stored and processed there. If you ride from somewhere else — the EU included — creating an account sends the fields above to the US, and this policy is the promise about what happens to them once they arrive. Everything that never leaves your machine, which is most of it, is wherever you are.

The two disclosures we reserve

Two situations could put account data in hands other than ours, and honesty means naming them. If we receive a legally binding demand — a court order or its equivalent — we will comply, disclose the minimum it compels, and tell you unless the law forbids us to. There is some comfort in how little there would be to hand over: no rides, no history, no messages.

And if OpenCycle itself changes hands — is acquired, or passed to a successor — the account records go with the service, still bound by this policy, and the change will be announced before it happens. A successor wanting to do more with the data than this page allows would need to ask you first.

Your rights

Depending on where you live — under the GDPR and laws like it — you have the right to see the data we hold about you, to correct it, to take it with you, and to have it erased. OpenCycle is ahead of the paperwork here: everything an account holds is shown in the app, editable in the app, and deletable in the app, and everything else never left your machine. If you want any of it done by hand, or you believe something here is wrong, write to privacy@opencycle.net. You also have the right to complain to your data-protection authority.

Children

OpenCycle is not directed at children. Do not create an account if you are under the age at which your country lets you consent to one — ride without an account instead, which sends us nothing.

Changes

If this policy changes, the new version will be posted here with a new effective date, and a change that matters — anything that means more data, or new hands on it — will be flagged on the site rather than slipped in quietly.

Contact

The controller of the data this policy describes is Storybooks LLC. Privacy questions: privacy@opencycle.net. Security reports: security@opencycle.net.