Privacy
Files stay in your browser. If you connect Strava, Planet Creator's own Cloudflare Function fetches only the week you choose, turns it into the planet's activity shape in memory, and stores nothing server-side.
Effective 2 October 2026
When you use files
FIT files, compressed FIT files and export archives are opened in this browser tab. They are not uploaded to Planet Creator. The browser reduces GPS tracks to origin-free route shapes before making a planet.
When you connect Strava
Planet Creator asks for Strava's read and activity:read_all permissions. For the Monday-to-Monday week you select, the Function may fetch activity summaries and streams containing route coordinates, altitude, heart rate, elapsed time, cadence and temperature. It immediately reduces coordinates to a relative route shape, maps the other values, and returns no latitude or longitude to the page.
The Function does not write this data to a database, cache, log or analytics store. Strava and Cloudflare still process the request and ordinary request metadata under their own policies. Planet Creator does not poll Strava and has no webhook.
Connection cookies
- A random OAuth check is held for ten minutes in a secure, HttpOnly cookie.
- A secure, HttpOnly connection cookie lasts no more than 30 days. Its encrypted contents are the Strava athlete ID, granted scopes, access token, rotating refresh token and expiry time. The encryption key stays in Cloudflare's secret store.
Browser JavaScript cannot read either cookie. Planet Creator discards Strava names, profile photo, city and other profile details returned during authorization.
What your browser keeps and shares
A planet link carries a compact copy of the transformed week. Copied links and posters omit activity names, provider IDs and absolute coordinates, but they do reveal the painted planet and derived training details to anyone you give them to. Saving to Your shelf stores the planet in this browser's IndexedDB. A small localStorage marker remembers whether this browser has played its reading before.
Disconnect and delete
Use Disconnect Strava on Make yours to ask Strava to deauthorize Planet Creator and clear the connection cookies. If the cookie is already gone, revoke Planet Creator in Strava's application settings. Because no Strava activity data is stored server-side, there is no server record to delete.
Delete a saved planet from Your shelf, or clear this site's browser data to remove all locally saved planets and reading markers.
Contact
Questions or deletion help: rlfleming93@gmail.com. Planet Creator is made by Ryan Fleming.