Leaderboard — Step Count Tracker · Effective date: June 1, 2026 · Last updated: June 1, 2026
We are committed to being transparent about the limited data we collect and how it is used. This policy explains our practices in plain language.
This application ("Steps Leaderboard") is a fitness step-count tracking service that enables users wearing compatible Garmin devices to participate in activity rankings. The service is designed with privacy in mind: no real names, email addresses, or contact details are ever collected. All participation is based on a user-chosen pseudonym.
The following data is submitted by your device each time an activity record is sent:
| Data Field | Description | Identifiable? |
|---|---|---|
| Nickname | A pseudonym chosen freely by the user (max 32 characters). Not a real name. | Anonymous |
| Timezone | Your local timezone or UTC offset, used to display your local time alongside activity records. | Anonymous |
| Step count | Number of steps recorded by your device at the time of the request. | Anonymous |
| Device identifier | A unique string generated by or assigned to your device, used solely to group your activity records together. It is not linked to your name or personal profile. | Pseudonymous |
| Timestamps | UTC timestamp and local timestamp of the activity record. | Anonymous |
We do not collect: names, email addresses, phone numbers, location data (GPS coordinates), photos, or any other information that could directly identify you as an individual.
The data collected is used exclusively for the following purposes:
Your data is never sold, rented, or shared with third parties for marketing, advertising, or any commercial purpose.
Because participation requires only a freely chosen nickname and a device-generated identifier, your activity records cannot be traced back to you as a natural person by the service operator, unless you voluntarily disclose that a specific nickname belongs to you.
The device identifier is treated as a pseudonymous key — it links your records together within the system but carries no inherent personal meaning. You may use any nickname you choose, including a fictitious one.
Activity records are retained for as long as the leaderboard service is active. Because records contain no personal data, standard GDPR-style erasure rights do not formally apply; however, if you wish to have records associated with your device identifier removed, you may contact the service administrator (see Section 9).
All data is transmitted over HTTPS. Access to the administration interface is protected by authentication. The API requires a shared secret key to prevent unauthorised submissions. Database access is restricted to the application server.
No security measure is 100% infallible. In the unlikely event of a data breach, affected parties will be notified in a timely manner. Given the anonymised nature of the data, the risk to individuals is considered minimal.
The public-facing API does not use cookies or tracking pixels. The admin dashboard uses a session cookie solely to maintain your authenticated session; this cookie is not used for analytics or tracking across sites. No third-party analytics scripts (e.g., Google Analytics) are embedded in this service.
This service does not knowingly collect data from children under the age of 13. If you believe a child has submitted data to this service, please contact the administrator to have it removed.
Even though the data collected is anonymised and pseudonymised, you retain the right to request the deletion of records associated with your device identifier. To do so, or if you have any questions about this policy, please contact the service administrator.
Because no email addresses are collected during registration, requests must include your device identifier or nickname so that records can be located.
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date at the top. Continued use of the service after changes are posted constitutes acceptance of the revised policy.