Privacy

Who we are. The Splits Lab (thesplitslab.co.uk, the Race Pack at app.thesplitslab.co.uk, and @thesplitslab on Instagram) is a trading name of A. Brooman, who is the controller of the personal data described here. Contact: hello@thesplitslab.co.uk.

The short version. No cookies, no analytics, no tracking, no accounts and no mailing list. Our tools work in your browser, and anything you type into them stays on your device. Paddle sells the Race Pack for us, so we never see buyers' details. We don't sell data.

Visiting the site

Our hosting provider, Cloudflare, processes standard technical data such as your IP address and browser details. It uses them to deliver the site and protect it from attacks. We don't use this data to identify or profile you. Lawful basis: our legitimate interest in running a secure website.

The free fuel and sweat planner

The planner runs in your browser. Nothing you enter is sent to us. If you tick "Remember my answers on this device", your answers are saved in your browser's local storage so they're there next time. Untick the box, or clear this site's data in your browser, to delete them. We only save them because you asked, so the basis is your consent.

The Race Pack

Buying it. Paddle (Paddle.com Market Limited) sells the Race Pack on our behalf as the merchant of record and reseller. When you click "Get the Race Pack", your browser loads Paddle's checkout from Paddle's servers; Paddle collects your payment and contact details, sends your receipt and handles refunds, under its own privacy notice. We never receive your card details. Paddle shows us the email address and country of each buyer in its dashboard, "for product fulfilment"; we look at them only to deal with a refund or support request, and don't copy them anywhere else. After payment, your browser sends us Paddle's order reference so our server can ask Paddle whether that order is paid; Paddle's answer contains order and price references and amounts, not who you are. We keep only a scrambled (hashed) form of the order reference and a count of devices unlocked with it (up to 3), for three years, so a purchase can't be shared indefinitely. Your browser then gets a key that unlocks the pack there.

Using it. Your logged runs, weights, saltiness answers, race details, plans, order reference and unlock key are stored in your browser's local storage on your device. We never receive them. You can save a backup file, restore it on another device, or delete them at any time. Storing them on your device is necessary to provide the service you asked for. We also ask your browser to keep this data rather than clear it to save space; your browser decides.

Backing up to your Google Drive (optional). If you choose "Back up to Google Drive", you sign in to Google and allow the pack to use a hidden app folder in your own Google Drive. The pack can only see files it created in that folder, not the rest of your Drive. Your browser sends the backup (your runs, plans, race details, order reference and unlock key) straight to Google and reads it back from there when you restore; the sign-in token stays in that browser tab for up to an hour. Neither the backup nor the token passes through our servers, and we can't see your Drive. Google holds the backup as part of your Google account, under Google's privacy policy. You can stop at any time in the pack, and delete the copy in Google Drive (Settings, Manage apps, The Splits Lab, Delete hidden app data). The Splits Lab's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Weather and place search. When you search for a place or fetch a forecast, your browser asks the services directly:

• the place you type goes to OpenStreetMap's Nominatim service;
• the place's rounded coordinates go to the Norwegian Meteorological Institute (MET Norway).

These requests don't go through us, so we don't see what you search for. Like any website you visit, those services receive your IP address under their own privacy policies. A town or park works as well as a home address.

Help. The Race Pack help page answers questions about unlocking, devices and backups. Paddle handles payment questions and refunds.

Instagram

If you comment on our posts or send us a direct message, Instagram (Meta) shares the content and your username with us through its official API so we can read and reply. We use it only to reply. Our copy is held in Cloudflare's storage and deletes itself automatically 30 days after the comment or message was sent; a working copy for drafting replies, held privately on GitHub, is replaced as items expire. Replies we send are recorded without your username or Instagram ID. Meta is responsible for how Instagram itself uses your data. Lawful basis: our legitimate interest in promoting The Splits Lab and replying to you.

Future connections to Garmin, Strava and similar services

We may later offer an optional connection to Garmin Connect, Strava or a similar service so you don't have to type in your runs. We would only do this through the service's official developer programme, and it would work the same way as the rest of our tools:

• Your data stays on your device. Your activities and any body weight go from the service straight to your browser and are stored only there. We won't receive them, store them or see them.
• It's off unless you switch it on. You authorise it on the service's own site and can disconnect at any time, both in our tools and in the service's settings. We will never ask for your password for that service.
• Sign-in only, if a service insists. If a service requires part of the sign-in step to go through our server, only the sign-in token would pass through it, briefly. It would never include your activities or weight, and we wouldn't keep it. If a service can't work this way, we won't offer the connection.
• The service's own terms and privacy notice also apply.
• We'll update this notice before any connection goes live.

Emails to us

If you email hello@thesplitslab.co.uk, Cloudflare forwards it to our Gmail inbox (Google). We use your email address and message only to reply, and delete them within 12 months once the conversation is finished. Lawful basis: our legitimate interest in replying to you.

Who processes data for us

• Cloudflare (hosting, security, and storage of Instagram comments and messages for 30 days)
• GitHub (a private, replaceable copy of the last 30 days of Instagram comments and messages, used to draft replies)
• Meta (Instagram)
• Google (Gmail, where emails to us are delivered)

Paddle (payments and the checkout), OpenStreetMap Foundation (place search) and MET Norway (forecasts) receive data directly from you as independent organisations under their own privacy policies. Some providers are based outside the UK, including in the US. Where they are, transfers are covered by UK adequacy regulations or the UK's approved contract terms (the International Data Transfer Agreement or the UK Addendum).

Your rights

You have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct or delete it;
• object to or restrict how we use it.

Contact us at hello@thesplitslab.co.uk. Data in our tools never reaches us, so you can delete it yourself by clearing this site's data in your browser. For your purchase records, contact Paddle (paddle.net). If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint.

Children

Our tools aren't designed for, or aimed at, anyone under 18.

Changes

We'll update this page when anything changes, and show the date of the last change.

Last updated: 14 November 2026