The short version: We do not collect your name, email address, phone number, or any personally identifiable information. Your race entry token exists only on your device. We do not retain it. We do not share it. We do not sell it.
What we collect.
When you register for a race through the shala.run app, we generate a unique anonymous token tied to the race you selected. That token is stored temporarily on our server for the sole purpose of validating your entry on race day. It contains no personal information.
We collect:
- An anonymous entry token (a random identifier)
- The race you registered for
- The timestamp of registration
- Payment confirmation from Stripe (transaction ID only — no card details)
We do not collect your name, email address, phone number, location, device identifier, or any other personal data.
What we do not collect.
- Name
- Email address
- Phone number
- Physical address
- Device identifier or advertising ID
- Location data
- Browsing or usage analytics
- Payment card details (handled entirely by Stripe)
Payment processing.
Race entry fees are processed by Stripe, a third-party payment processor. When you pay, your payment information is transmitted directly to Stripe and never passes through or is stored on our servers. Stripe's privacy policy governs how your payment data is handled.
We receive only a confirmation that payment was successful and a transaction reference. We do not receive or store your card number, bank details, or billing address.
How your token is used.
Your entry token is used for one purpose: to confirm your presence on race day. When you show the QR code, the token is validated against our database. Once the race has taken place, tokens are no longer active.
The token on your device is the only record of your registration. We do not link it to any personal identity. If you lose the QR code, we have no way to identify who registered — by design.
Data retention.
Registration tokens are retained on our server only for the duration necessary to validate entries for a given race. After the race has taken place, tokens are deleted. We do not maintain any long-term database of who has run our races.
Third-party services.
shala.run uses the following third-party services:
- Stripe — payment processing. Their privacy policy is available at stripe.com/privacy.
- Netlify — website hosting. No personal data is collected through the hosting layer.
- Replit — application hosting. No personal data beyond the anonymous token is processed.
We do not use advertising networks, analytics platforms, or tracking tools of any kind.
Children's privacy.
shala.run does not knowingly collect any information from children under the age of 13. Because we collect no personal information from any user, this policy applies equally to all users regardless of age.
Your rights.
Because we do not collect personal information, there is no personal data to access, correct, or delete. If you have a question about a specific transaction, you can contact us at the address below and we will respond within a reasonable time.
Changes to this policy.
If this policy changes materially, we will update the effective date at the top of this page. The current version is always available at shala.run/privacy.