Privacy

Who is responsible

Kaada Nordic MarTech (org. no. 936 289 835, Ytre Eiganesveien 13, 4022 Stavanger, Norway), run by Fredrik Asche Kaada, operates Project 171 and is the data controller under the GDPR and the Norwegian Personal Data Act.

What is collected

• Email address — only if you ask for the free kit, join the UTMB invites list, join the merch waitlist or tick “weekly training tips”. Used only for what you ticked: the kit, UTMB invites, the merch launch email, or the weekly tips newsletter. Each is a separate choice. Legal basis: your consent.
• Account — if you sign in, your email address (and name from Google if you use Google sign-in) and membership tier. Legal basis: providing the service you use.
• Anonymous site statistics — page visited, which site referred you (for example LinkedIn or Strava), links clicked to other sites, and technical errors. No cookies, no visitor IDs, no IP addresses are stored. Browsers set to “Do Not Track” send nothing. Legal basis: legitimate interest in running a working site.
• Advisory bookings and messages — your name, email, chosen call time and message. Used only to arrange and hold the call. Legal basis: steps you ask for before a contract.
• Race entries and training log — only if you sign in and use My races. Races you log, weekly hours, climb, distance and notes. Private to you. Legal basis: providing the service you use.
• Checklist ticks — saved in your browser, and in your account when you're signed in so progress follows you. Legal basis: providing the service you use.
• Strava connection — only when you choose to connect. Project 171 stores encrypted access credentials and reads your recent activity time and climbing to show plan-versus-actual figures privately in My account. It does not send Strava data to AI models or other third parties. Disconnecting deletes the stored connection credentials. Legal basis: your consent.

How long it is kept

Email addresses are kept until you unsubscribe. Advisory messages are kept for up to 24 months after the last contact. Race entries and training logs are kept until you delete them or ask me to delete your account. Strava credentials are deleted when you disconnect. Anonymous statistics are kept for up to 13 months.

Account profile and training metrics are retained while your account remains active. Toggling off your profile switch or clicking 'Remove my entry' deletes your public data immediately. Full account deletion requests sent via our privacy form are verified and completed within 30 days. We delete your profile, ranking entry, training logs and public page. Payment records are kept for 5 years after the end of the financial year, as Norwegian bookkeeping law requires.

Who processes it

These service providers act on Project 171’s behalf under data processing terms: Lovable (site hosting, database and sending site emails), Cloudflare (delivering the site), Stripe (payments and receipts, only if you buy), Brevo (Sendinblue SAS, France — only the weekly tips newsletter list) and Google (only if you choose Google sign-in). Some providers may handle data outside the EEA; where they do, they rely on EU Standard Contractual Clauses. Data is never sold or shared for others’ marketing.

Emails and cookies

Two kinds of email. Service emails (receipts, account, cancellation, password) are sent because you use the service; you cannot unsubscribe from these while you have an account. Weekly tips are sent through Brevo only if you ticked the box. Every tips email has a one-click unsubscribe link, no sign-in needed, or email contact@project171.com. We never send marketing to anyone who has not opted in, and never buy or rent lists.

Anonymous page and button statistics are collected only after you accept in the cookie banner. No advertising trackers, no profiles, no IP addresses stored.

Third parties

• Lovable — hosting, database in Frankfurt, site emails
• Cloudflare — site delivery
• Stripe — payments
• Brevo — tips sign-ups only
• Google — only if you sign in with Google
• Strava — only if you connect it

Your rights

You can ask to see, correct, export or delete your data, withdraw consent at any time via the unsubscribe link in any email, and complain to Datatilsynet (the Norwegian Data Protection Authority).

Make a privacy request

Use this form for any privacy question or to exercise your rights, or email contact@project171.com. Requests are answered within 30 days.