Privacy

Last updated 24 September 2026

This policy covers wewill.run, where running clubs make free pages. It explains, in plain English, what we collect, why, what the law lets us rely on, who else sees it, how long it is kept and what you can ask for. Club pages themselves never load Google Analytics or the cookie banner; only Cloudflare’s cookieless count runs there.

Who we are

RacerPacer Clubs is run by Ben Pollock, trading as RacerPacer, Calle Salvia 1, 28232 Las Rozas, Madrid, Spain. We are the “controller” of your personal data under the EU General Data Protection Regulation (GDPR) and, for people in the UK, the UK GDPR. Write to us at that address or email hello@racerpacer.com.

What we collect and why

Keeping the site running

When your browser asks for a page, the server records your IP address, the page, the time, your browser type and the page you came from, like every website.

Why: To deliver pages, keep the site secure and find faults.
Legal basis: Legitimate interests (running a secure website).
Who else: Hostinger International Ltd (Cyprus), our web host.
How long: In the host’s server logs until its routine log rotation deletes them. We don’t combine them with anything else.

Counting visits (Cloudflare Web Analytics)

Every page loads Cloudflare Web Analytics, which counts page views, the page you came from, your browser and device type, and your country. It sets no cookies, stores nothing on your device and doesn’t follow you between sites. Your IP address reaches Cloudflare to make the count but isn’t kept in the figures we see.

Why: To see which pages are used, so we know what to improve.
Legal basis: Legitimate interests (understanding use of the site in a way that doesn’t identify you). Because nothing is stored on your device, it doesn’t need your consent under cookie law.
Who else: Cloudflare, Inc. (USA).
How long: We only ever see totals, never individual visits.

Understanding how the site is used (Google Analytics), only if you say yes

If you accept analytics, Google Analytics records the pages you visit, how you arrived, how long you stayed, your device and browser, and your approximate location (town or region, worked out from your IP address, which Google doesn’t store). It sets the cookies listed below. Until you accept, Google Analytics isn’t even loaded, so nothing at all reaches Google.

Why: To understand which pages and features help people, across all the RacerPacer sites.
Legal basis: Your consent. Withdraw it at any time from “Cookie settings” in the footer and the cookies are deleted.
Who else: Google Ireland Limited, which processes it for us; it may be handled by Google LLC in the USA.
How long: 14 months, then Google deletes it. We have switched off Google signals, advertising features and data sharing with Google.

Club pages and accounts

For an account: your name, email address and password (stored scrambled; we can’t read it). For your club page: everything you type into it, your logo and any GPX routes you upload. Once approved, the page is public: name, logo, description, place, links, meet-ups and routes. If you add a contact email it shows as a button. Your account email is never shown.

Why: To run your club page and email you about it (password links, approval, problems).
Legal basis: Contract (providing the page you signed up for).
Who else: Hostinger International Ltd (Cyprus), our web host.
How long: Until you delete your page and account in My club, or ask us to. Deleting removes the page, logo and routes.

Reporting a club page

If you report a page, we collect your email address and what you tell us.

Why: To look into the report and reply.
Legal basis: Legitimate interests (keeping club pages accurate and safe).
How long: Up to a year after the report is closed.

Stopping spam on forms (Cloudflare Turnstile)

Forms are checked by Cloudflare Turnstile, which looks at signals from your browser and your IP address to tell a person from a script. It runs only on pages with a form and doesn’t track you around the web.

Why: To keep bots from flooding the forms.
Legal basis: Legitimate interests (protecting the site and its users from abuse). It is needed for the form to work.
Who else: Cloudflare, Inc. (USA).
How long: Cloudflare uses the signals for the check and doesn’t give them to us.

Emails you send us

If you email hello@racerpacer.com, we get your name, email address and whatever you write.

Why: To reply and help you.
Legal basis: Legitimate interests (answering the people who contact us).
How long: Up to two years after the last message between you and us, or for as long as a listing or club page you wrote about is live, then deleted.

Maps

Maps are drawn from OpenStreetMap data. Your browser fetches the map tiles straight from OpenFreeMap, which sees your IP address, as any website you load does. We send it nothing else.

Why: To show maps.
Legal basis: Legitimate interests (showing the map you opened).
Who else: OpenFreeMap, for map tiles.
How long: Not kept by us.

Cookies and storage on your device

Only the items marked “needed” are used without asking, because the site can’t work, or can’t do what you asked, without them. Google Analytics cookies are set only if you accept them. Change your mind at any time from Cookie settings in the footer; saying no deletes them.

Name	What it does	How long	Type
`_ga`	Google Analytics: tells one visit from another with a random ID. Only set if you accept analytics.	Up to 2 years (most browsers cap it at about 13 months)	Cookie (optional)
`_ga_EW0MBXMC6H`	Google Analytics: keeps track of the current visit. Only set if you accept analytics.	Up to 2 years (most browsers cap it at about 13 months)	Cookie (optional)
`wordpress_logged_in_, wordpress_sec_`	Keeps you signed in.	Until you sign out, or 14 days if you tick “Remember me”	Cookie (needed)
`wordpress_test_cookie`	Checks your browser accepts cookies at sign-in.	Until you close the browser	Cookie (needed)
`wp_consent_prefs`	Remembers your cookie choice so we don’t ask on every visit.	1 year	Cookie (needed)

Who else sees it

We don’t sell your data, and we don’t use it for advertising. These providers handle it for us under contracts that limit them to our instructions:

Hostinger International Ltd (Cyprus), our web host
Cloudflare, Inc. (USA)
Google Ireland Limited, which processes it for us; it may be handled by Google LLC in the USA

Some features load content straight from another service, which then sees your IP address and handles it under its own privacy policy, not our instructions:

OpenFreeMap, for map tiles

We would also share data if the law required it.

Data sent outside the EU and UK

Some of these providers are in the USA. Those transfers are covered by the EU-US Data Privacy Framework (and its UK extension) where the provider is certified, and otherwise by the European Commission’s standard contractual clauses (with the UK addendum). Ask us for details of the safeguard for any provider.

Your rights

You can ask us to:

tell you what we hold about you and give you a copy;
correct anything that’s wrong;
delete it;
limit how we use it;
give it to you, or another service, in a machine-readable file;
stop using it where we rely on legitimate interests (you can object at any time).

Where we rely on your consent, you can withdraw it at any time; it doesn’t affect what happened before. We make no automated decisions about you. Email hello@racerpacer.com and we’ll reply within one month. It’s free.

Complaints

Please tell us first so we can put it right. You can also complain to a data protection authority: the Spanish Agencia Española de Protección de Datos (AEPD), the authority where you live in the EU, or, in the UK, the Information Commissioner’s Office (ICO).

Children

RacerPacer Clubs isn’t aimed at children, and we don’t knowingly collect data from anyone under 14.

Changes

If this policy changes, the date at the top changes too. If a change affects how we use data you’ve already given us, we’ll tell you before it takes effect.