The most important thing on this page is short: your activity file never reaches us.
Your route is drawn in your browser
When you drop a `.gpx`, `.fit` or `.tcx` file into the editor, it is read and drawn on your own machine. Nothing is uploaded. If you close the tab before adding anything to the basket, we never had it and there is nothing to delete.
What we receive is what you put in the basket: the finished design, with the route stored as a compressed line — already trimmed around its start and end by the privacy radius you chose. Your home address is not in the order because it was removed before the order existed.
We do not keep an archive of your activities. There isn't one to leak.
Who is responsible
Epic Efforts is a trading name of Forml ApS, CVR 45580377, Hejrebakken 75, 3500 Værløse, Denmark. hello@epicefforts.com
What we collect, and why
| What | Why | Legal basis | |---|---|---| | Name, address, email, phone | To make and ship your order | Contract, GDPR art. 6(1)(b) | | Order contents, including the trimmed route | To produce the print and handle complaints | Contract | | Payment status | To confirm you paid — we never see the card itself | Contract | | Basic traffic data | To keep the shop working and secure | Legitimate interest, art. 6(1)(f) |
Strava
If you connect Strava, you decide what we may read, and you can disconnect at any time from your Strava account.
Your Strava access token never reaches your browser. It is held server-side and expires after an hour; the page only ever holds a lookup id. We read the activities you pick, and we do not store them afterwards.
Who else touches your data
We use these processors, and no others:
- Shopify — the shop, checkout and order records. Ireland/EU.
- Gelato — printing and shipping. Receives your delivery address and the print file.
- Cloudflare — hosting and the file-rendering service.
- Mapbox — map backgrounds in the editor preview, when you choose one.
We do not sell your data, and we do not share it for advertising.
How long we keep it
Order records are kept for five years plus the current year, because Danish bookkeeping law (*bogføringsloven*) requires it. Emails are kept as long as they are useful and then deleted. Marketing consent is kept until you withdraw it.
Your rights
You can ask for a copy of what we hold, have it corrected, have it deleted, object to how we use it, or ask us to move it elsewhere. Write to hello@epicefforts.com and you will hear back within a month.
If you think we are handling your data wrongly, you can complain to the Danish Data Protection Agency: Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby — datatilsynet.dk.
Cookies
We use the cookies the shop needs to keep your basket and your session. If we ever add analytics or advertising cookies, you will be asked first.
*Last updated: 28 August 2026*