Privacy
What Nightleg collects, why, who can see it, and how long it's kept. In plain words, because most of it is someone's location.
Last updated October 16, 2026.
The short version
- Nightleg tracks people only during a race, and only when they turn it on. Sharing stops by itself after the race.
- Where someone has been is seen by the crew of that race, people who have its crew link or code. Family links never see location history.
- We don't sell data, show ads, or use analytics or advertising trackers.
- You can ask us to delete a race and everything in it: [email protected].
Who we are
Nightleg (nightleg.com and the Nightleg iPhone app) is run by NightLeg LLC. Questions or requests about your data: [email protected].
What we collect, and why
| What | Why | Who can see it |
|---|---|---|
| Location from the Nightleg app on a runner's, pacer's or crew member's phone, while they have Share my location turned on: position, time, accuracy, speed, altitude and battery level | To show where people are, estimate arrival times, and check runners in at aid stations | The race's crew see current positions and the full history; family links see current positions on the map only, never the history |
| Location from a satellite tracker (SPOT or Garmin inReach) that the crew links to the race, read from the tracker's own shared feed | The same, where phones have no signal | As above. A Garmin MapShare password is kept on our server and never sent to anyone's browser |
| The race: its name, start time, checkpoints, and the names the crew enters for the runner, pacers and crew | To run the race page | The crew and family of that race |
| Times logged at checkpoints, by a person or by GPS | Progress, projections and alerts | Crew and family of that race |
| Cheers, photos and voice notes people post | So family and crew can reach the runner | Crew and family of that race |
| Phone location settings (whether sharing is on, set to Always, Precise, Low Power Mode), reported by the app | So the crew can see why a phone has gone quiet | The crew of that race; kept only in memory, not stored |
| A device address for alerts (an Apple push token) and which alerts were chosen | To send the alerts someone asked for | Nobody; used only to send them |
| Email address of the person who sets up a race, and sign-in records | To sign in and own the race | Only us |
| Payment records: what was bought, when, and the amount | To make a race live and keep accounts | Only us. Card details go to Stripe and never reach us |
| Email, race name and date when someone asks for a race guide | To email them once, when the guide is up | Only us |
When location is collected, and when it stops
The app shares location only after someone taps Share my location, and iPhone asks for permission first. It can be turned off any time in the app or in iPhone Settings.
Sharing for a race ends by itself ten minutes after the finish is logged, or after the crew ends the race early, and in any case two hours after the race's cutoff. The app stops itself at that time, and our server throws away any location taken after it.
What stays on your phone
The page and the app keep a few things on the device so they work without signal: the race code, your name on the board, recent race data, and anything waiting to send. Logging out of a race clears them.
Who else handles it
We use a small number of services to run Nightleg. They handle data only to provide their service to us.
- Railway hosts our servers and database, in the United States.
- Cloudflare sits in front of nightleg.com and handles its traffic.
- Resend sends sign-in emails.
- Stripe takes card payments.
- Apple delivers alerts to iPhones.
- SPOT and Garmin, whose shared feeds we read when a crew links a tracker.
- Pages load map images from OpenStreetMap, fonts from Google Fonts, and the map library from cdnjs. Like any website they can see the visitor's network address when a page loads.
We don't sell or rent personal data, and we don't share it for advertising.
A public recap is opt-in
After a race the crew can publish a recap page. It shows the runner's name, times and pace, and nothing else: no other names, no map, no locations, no messages.
How long we keep it
We keep a race's data, including its location history, until the person who set it up asks us to delete it. Removing a race from your account hides it and stops its links working; ask us if you want it deleted for good. Account and payment records are kept as long as we need them for accounts and the law.
You can delete your account yourself, in the app or on the website: sign in, then Delete account at the bottom of your races. That removes your email and name, signs you out everywhere and takes the races you set up offline. Records of payments stay, without your email, for as long as the law requires. To have a race's data deleted for good as well, email [email protected].
Your choices and rights
- Turn location sharing off at any time, in the app or in iPhone Settings.
- Ask us for a copy of a race's data, to correct it, or to delete it: [email protected]. We'll confirm the request comes from the race's owner or the person concerned.
- Depending on where you live, you may have further rights over your data. Contact us and we'll help.
Children
Nightleg is meant for adults. Races with younger runners should be set up by a parent or guardian, who decides who gets the links.
Changes
If we change this policy in a way that matters, we'll update the date above and, for big changes, tell race owners by email.