Privacy & Cookies
Last updated: September 3, 2026
Overview
Competi.ro is a community calendar for running, cycling and triathlon events in Romania. This page explains what personal data we collect, why, and how you can exercise your rights under the EU General Data Protection Regulation (GDPR) and Romanian Law 506/2004 on electronic communications privacy.
Who is responsible
Competi.ro is the data controller for the personal data described here. For any privacy question, contact us at [email protected].
Data we collect
- Account data: Email address and, if you sign in with Google, your name and profile picture. Used to authenticate you and personalize the site.
- Strava data (optional): If you connect Strava, we receive your athlete profile and activity data you explicitly authorize. You can disconnect at any time from your profile or by revoking access on Strava; in both cases your Strava activity data, matches, and leaderboard entries are permanently deleted from our systems.
- Site activity: Event subscriptions, reviews, change proposals, leaderboard entries and saved filters. Used to operate features you request.
- Technical data: IP address, browser type and basic request logs, kept short-term for security and abuse prevention. Not used for profiling.
- Maps: Event maps are drawn by Mapbox, a US company. When a map renders, your browser requests map tiles, styles and fonts from api.mapbox.com, which receives your IP address, the page address and the map area you view. The Mapbox library also reports map usage to events.mapbox.com — each map load, the style it loaded and a once-a-day usage ping — checks a map session with api.mapbox.com, and keeps a random device identifier in your browser's local storage (mapbox.eventData.*), rotated every 24 hours, to count those loads. That reporting cannot be switched off in the library. No account data is sent, and nothing is used for advertising; Mapbox's own privacy policy describes its handling of this data.
- Weather and wind: Race-day weather and wind along a course come from Open-Meteo. Our server asks for the event's location and the course's coordinates; your browser never contacts Open-Meteo and no data about you is sent.
Cookies and similar technologies
We use a small number of first-party cookies. If you accept analytics cookies, Google Analytics also sets first-party cookies to measure how the site is used. Event maps keep one identifier in your browser's local storage, listed below. We do not use advertising or cross-site tracking cookies.
| Category | Purpose | Retention |
|---|---|---|
Strictly necessarycc_consent, theme, locale, next-auth.* | Sign-in session, language preference, theme, and your consent record. Required for the site to work — no consent prompt is needed under EU law. | Up to 1 year |
| Functional | Reserved for optional convenience features (e.g. remembered filters). Not active today. | Up to 1 year if enabled |
| Analytics | Google Analytics 4 — aggregate page and traffic statistics used to improve the site. Advertising and personalization signals stay switched off. Nothing loads unless you opt in, and withdrawing consent deletes these cookies. | Up to 13 months if enabled |
| Marketing | Reserved for campaign measurement. Not active today; nothing is set unless you opt in. | Up to 13 months if enabled |
Local storage (maps)mapbox.eventData.* | Mapbox GL keeps a random identifier in local storage (mapbox.eventData.*) to count map loads. Set only on pages that render a map; not used for advertising, and it cannot be switched off in the library. | Identifier rotated every 24 hours; the keys stay until you clear site data |
You can change your choices anytime via .
Legal basis
We rely on (a) your consent for non-essential cookies and marketing communications; (b) performance of a contract for delivering the features you sign up for; (c) our legitimate interest in protecting the site from abuse and improving it without identifying you; and (d) legal obligations where applicable.
Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and associated data.
- Restrict processing in certain situations.
- Receive your data in a portable format.
- Object to processing based on legitimate interest.
- Withdraw consent at any time, without affecting prior lawful processing.
To exercise any of these rights, email [email protected]. We respond within 30 days.
Complaints
If you believe your data is mishandled, you can lodge a complaint with the Romanian Data Protection Authority (ANSPDCP) at anspdcp.ro.