Analog Endurance

Privacy Policy

Effective date: 12 August 2026
Last updated: 12 August 2026

1. What this covers

This policy covers the website at analogendurance.com, including the training plan builder at /plan-builder/. Throughout, "we" and "us" mean Analog Endurance, a sole proprietorship operating from Colorado, United States. Contact: [email protected].

The Service is offered to users in the United States only, as set out in the Terms of Service. It is not directed at or offered to users in the European Union or the United Kingdom.

Buying is somewhere else. Checkout, payment, printing and delivery all happen on a separate shop run by Fourthwall. That shop has its own privacy policy and its own terms, and they govern the purchase. This policy covers the builder, the upload path and the analytics on this site.

2. The short version

• There are no accounts, no sign-up, and no password. We do not know who you are.
• If you upload a training plan, the file is sent to Google to be read, and it is not stored by us or by anyone on our behalf.
• The plan you build lives in your browser. We do not have a copy.
• Analytics never receives plan content: not the title, not filenames, not a single workout.
• We use no cookies, run no advertising, and sell nothing about you.
• Your card details never reach this site.

3. What we collect

3.1 Files you upload, if you choose to upload one

The builder can read a training plan you already have. This is optional. If you never use it, nothing in this section applies to you.

We accept PDF, PNG, JPG, WEBP, HEIC, HEIF and CSV files, up to 8 MB each, up to three files at a time.

Before the file leaves your browser, images are decoded and re-encoded. That step removes embedded metadata, including any location coordinates a phone attached to a photograph of a plan, and reduces the image to 1568 pixels on its longest edge. HEIC and WEBP files become PNG. PDFs and CSV files are sent as they are.

The file is then sent to Google. It is transmitted through our infrastructure, which is hosted by Cloudflare, and sent to Google's Gemini API for automated processing, where a model reads the plan and returns it as structured text. We do not send your filenames, and we do not intentionally send your name or other identifying information along with the file.

We do not retain it. Analog Endurance does not intentionally write an uploaded file to a disk, an object store, a database, a cache or a backup. Our server holds the bytes in memory for the length of that one request and no longer. There is no retention period on our side because there is nothing retained and nothing to delete later, and the practical consequence is that reading the same plan again means uploading it again.

What Cloudflare and Google do with what passes through them is a separate question, governed by their own terms rather than by this policy. See section 4.

The plan we get back is written into the page you are looking at. It lives in your browser and nowhere else. Closing the tab loses it.

Google may process or retain API inputs and outputs in accordance with the terms applicable to the Gemini API service we use. We use the paid tier of that service, and we cannot control or guarantee what happens inside Google's systems, so this policy describes what we send rather than making promises on Google's behalf.

3.2 The plan you build or type

The plan title, the race, the colours, the background and anything you type into a day square are held in your browser. They are not sent to us, with two exceptions: the upload described above, and a purchase described below.

3.3 If you buy a poster or a print-ready file

When you continue to checkout, the settings and contents of your plan are sent to our server, drawn into an image and a PDF, and uploaded to Fourthwall so that a private listing can be created for your order. Those files are not stored by us. The private listing is removed within 48 hours whether or not you buy.

Payment is entirely Fourthwall's. Your card number, billing address, shipping address and email address are collected by Fourthwall on their own checkout, and they never reach this site. We cannot see them, and we could not produce them if you asked us to. Fourthwall is the merchant of record for the sale, and it independently processes information associated with purchases according to its own privacy policy and terms.

3.4 Analytics

We use PostHog to understand how the site is used in aggregate, served through our own domain rather than from PostHog directly. It is configured deliberately:

• No cookies. A random identifier is kept in your browser's local storage instead. Clearing site data for this site removes it.
• No session recording. We never see your screen.
• No automatic capture of what you click. This one matters here, because the things you click on this site include the squares you type your own training into.
• Your IP address is discarded before the event is stored, which also means we have no country or region data.
• No profile is built. There are no logins, and events stay anonymous.
• Do Not Track is respected. If your browser sends that signal, nothing is recorded.

What an event contains is a count, a duration, or a key from a list we wrote ourselves: how many weeks the plan is, which background was chosen, which paper size, whether the habit tracker was on. What an event never contains is plan content. Not the plan title, not a filename, not the text of a workout, not anything typed into a square. That rule is enforced in the code, not just intended.

Page views record the address of the page and any campaign parameters attached to it, for example if you arrived from a link we shared.

3.5 Bot protection on uploads

The upload form uses Cloudflare Turnstile so that a paid document reader is not left open to automated abuse. Your browser contacts Cloudflare to complete the check, and we send the resulting token together with your IP address to Cloudflare to confirm it is genuine. Turnstile runs only on that form.

3.6 Server and technical logs

The site is hosted on Cloudflare. As our host, Cloudflare processes each request in order to deliver the page, which includes seeing your IP address and the address you asked for.

When a request from us to another service fails, our server writes a short technical entry recording the status code and the error message that service returned. These entries exist to diagnose outages. They are not used to reconstruct anything about your plan, and they are not linked to you.

3.7 Things this site does not do

• No accounts, so no email address, no password, and no profile.
• No newsletter or mailing list on this site.
• No advertising, no ad network, no advertising identifiers, and no tracking pixels.
• No request for sensitive personal information anywhere in the Service.

That last one is worth one more sentence, because a training plan is a document you supply and we cannot see what is in it. Please do not upload unnecessary sensitive, private or confidential information, including medical detail, injury history, or anything about another person. Nothing in the Service asks for it and nothing in the Service needs it.

4. Who processes it

These are the companies that handle data on our behalf, and what each one is for.

Two more see your browser simply because they serve a file to it: Google Fonts provides the typefaces and the Tailwind CDN provides a stylesheet. Loading a file from a server means that server sees your IP address and browser. Neither is given anything by us.

5. No selling, no advertising

We do not sell personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined by the California Consumer Privacy Act. We have never done so. We run no advertising technology of any kind. Where your browser sends a Global Privacy Control signal, we honour it, though in practice there is nothing here for it to switch off.

6. Why we handle what we handle

We handle each of the things above for one narrow reason, and for no other:

• A plan you upload is processed because reading it is the thing you asked us to do. It is used for that one request and nothing else.
• Order information is processed so that the artifact you bought can be drawn and produced.
• Analytics is used to understand in aggregate how the site is used, so it can be improved. It carries no plan content and no identifier tied to a person.
• Bot protection and server logs exist to keep the upload path from being abused and to diagnose failures.

The Service is offered in the United States only, so this policy is written to United States privacy law. It does not attempt to describe rights or obligations under the European Union or United Kingdom General Data Protection Regulations, and we do not claim compliance with them.

7. Your rights

Depending on where you live you may have the right to ask for a copy of your personal information, to correct it, to delete it, to object to how it is used, or to complain to a regulator. To exercise any of these, write to us at [email protected].

It is worth saying what that means in practice here, because it is unusual. There is almost nothing to look up. We hold no account for you, no upload of yours, and no copy of your plan. Analytics events carry no identifier that can be traced back to a person, so we cannot single out your events even if you ask us to. For anything connected to an order, including your address and your email, Fourthwall holds the record and is the place to ask.

8. Children

This site is not directed at children. The Terms require you to be 18 or older to use the Service. We do not knowingly collect personal information from children, and we do not knowingly sell or share the personal information of anyone under 16.

9. Where the data goes

The services listed above are operated from the United States, and our analytics is stored in the United States. The Service is offered to users in the United States, so information about your visit is processed there.

10. Security

Everything travels over HTTPS. Uploads are checked by their actual file contents rather than by their name or their claimed type, and are size limited before anything else happens. The strongest protection is structural rather than procedural: an uploaded plan is never written anywhere, so there is no store of plans to be breached, no backup of them, and no retention window to get wrong.

No method of transmission or processing is completely secure, and we cannot guarantee absolute security.

11. Changes

If this policy changes we will update the date at the top of this page. If a change materially affects what happens to something you upload, we will say so on the page where you upload it.

12. Contact

Questions about this policy, or about anything above, go to [email protected].

For an order you have already placed, including refunds, delivery and address changes, Fourthwall is the seller and is the fastest route. Their policies are linked from the shop.