Privacy

To see whether ErgStats works well, it counts page views, page load speed and errors with PostHog, hosted in the EU (Frankfurt). It runs in cookieless mode: nothing is stored in your browser, and visitors are counted with a hash that changes every day. Your IP address is used for that count and then discarded; only your country is kept. Links lose everything after the ? except campaign tags.

Our server also records when you sign in or connect an AI tool, and, for each request from one, which tool ran, how long it took, whether it worked, which app sent it, and the shape of the request, like which machine or how many days it covered. That goes under an id that can’t be traced back to you without our server, and never includes your workouts, the dates themselves or what you asked.

The switch covers this browser’s visits and saves your choice in its local storage, nothing else. To opt out of what the server records too, email us and we’ll delete it.

• Your account: the name, email and profile picture Concept2 shares when you sign in.
• Your Concept2 connection: the access tokens that let ErgStats read your Logbook, encrypted.
• Sign-in sessions: when they expire, plus the IP address and browser they started from, so you can spot one you don’t recognize.
• Connected apps and API keys: which AI tools you approved, the access tokens they use and when those expire, and your API keys, stored hashed.
• Feedback from your AI tools: when a tool can’t answer something, your AI tool can send a short note about what was missing, with the app that sent it.

Workouts aren’t on this list. ErgStats fetches them from Concept2 when your AI tool asks and passes them straight on.

• Sign-in cookies keep you signed in. They’re only set when you sign in, and the site can’t work without them.
• Local storage remembers your light or dark theme, and your analytics choice if you turned it off.

• Concept2, where your Logbook lives.
• Vercel, which runs the site.
• Neon, which hosts the database, in Singapore.
• PostHog, which runs the analytics, in the EU (Frankfurt).

ErgStats shows no ads and never sells or shares your data with anyone else.

• Switch analytics off above, or turn on Do Not Track or Global Privacy Control in your browser.
• Disconnect an AI tool or delete an API key from your dashboard. Access stops immediately.
• Delete your account from the bottom of your dashboard. That erases your account, sessions, API keys, connected apps, feedback notes and Concept2 tokens straight away, and the analytics recorded under your account. Database backups and hosting logs keep a copy until they expire on their own schedule.
• Ask for a copy of your data, or for help if you can’t sign in any more, by emailing hi@chrsep.dev.

Under the GDPR, your account is handled to provide the service you signed up for, and analytics on the basis of a legitimate interest in keeping the service working, which you can object to at any time with the switch above.