Privacy

The public pages of this website set no cookies, use no local storage and build no profiles of visitors. Only the private members area sets one session cookie after you log in (see "Members area").

Who is responsible

Julian Franek, A-8670 Krieglach, Austria. Email: hello@stayaverage.cc

Hosting and delivery

This website is delivered by Cloudflare. When you open a page, your browser sends technical data that is needed to deliver and protect the website: your IP address, the date and time, the requested page and information about your browser. This data is processed only for delivery, security and fault analysis.

Legal basis: our legitimate interest in a secure and working website, Art. 6(1)(f) GDPR.

Retention: we do not keep server logs ourselves and have no access to complete log files. How long Cloudflare keeps technical data is set by Cloudflare's privacy policy and data processing agreement; it names no fixed period for these logs. You are not required to provide this data, but without it your browser cannot load the website.

Web analytics

We use Cloudflare Web Analytics to see how many people visit this website and which pages they open, so we can improve it. Cloudflare Web Analytics does not set cookies, does not use local storage and does not create profiles of individual visitors. We only see aggregated figures, such as page views, referring websites, countries, browser types and loading times.

For this, a script from static.cloudflareinsights.com is loaded and sends information about the page view to cloudflareinsights.com. According to Cloudflare, the IP address is not used to identify or follow visitors.

Legal basis: our legitimate interest in measuring the reach of this website and improving it, Art. 6(1)(f) GDPR.

Recipient: Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, acting as our processor under a data processing agreement.

Transfer to the USA: Cloudflare, Inc. is certified under the EU-US Data Privacy Framework. The transfer is based on the adequacy decision of the European Commission of 10 July 2023.

Right to object: you can object to this processing at any time by writing to hello@stayaverage.cc. You can also block the script from static.cloudflareinsights.com in your browser; the website works the same without it.

Members area

Members of Stay Average can vote, answer invitations to rides and events, and keep their own data in a private area that is reachable through the "Members" link in the footer. Creating an account requires a club code that we share with members in the group. If you create an account there, we store your first name, last name, email address, your gender (female, male or no answer), the date of registration, the approval status, your votes and your yes or no answers to rides. If you choose to, you can also enter your FTP (functional threshold power in watts), and if you create it, a scrambled value (hash) of your personal calendar subscription link. Your password is stored only as a salted hash, never in clear text. To limit failed log-in attempts we also keep short-lived technical records (a scrambled value derived from your IP address or email address, deleted after at most 24 hours).

Purpose: organising votes and rides within the collective, organising rides for women, showing the average FTP of the guys and of the girls, protecting the accounts and preventing misuse. Julian Franek approves accounts and sees names, gender, votes and answers to rides. He can give a member the role of organizer, who can create, change and delete rides. The FTP is stored in the database, but the admin list shows only the averages.

Who sees what: members who are logged in see the first and last names of the members who said yes to a ride, the number of yes answers, and their own answer. Gender and FTP of individual members are not shown to other members. Everyone, also visitors of the public pages, sees two numbers on the start page, and members also see them for each ride: the average FTP of the guys and of the girls. An average is the mean of the members of that group who entered an FTP, rounded up to the next 5 W, and it is shown from a single entry on, so with very few entries an average can equal the value of one person. Members who choose "no answer" for gender are in neither average.

Legal basis: your consent, Art. 6(1)(a) GDPR, which you give by ticking the box when you create the account. It covers the data listed above, including that other members see your name next to rides you said yes to. For the optional FTP you give a separate consent by ticking a second box when you save it. You can change your name, gender and FTP and delete your FTP in the members area at any time, and you can withdraw a consent at any time by writing to hello@stayaverage.cc; we then delete your account and votes. Withdrawal does not affect what was processed before. For the short-lived technical records against failed log-ins, for the session cookie and for the automatic notice described below, the legal basis is our legitimate interest in protecting the accounts and running the club, Art. 6(1)(f) GDPR.

Providing the data is voluntary. Without name, email address and a choice for gender ("no answer" is possible) you cannot create an account and cannot vote; the FTP is optional; nothing else on this website depends on it. There is no automated decision-making and no profiling.

Notice to the club: when someone creates an account, the Worker sends an automatic email through Cloudflare Email Routing to the club. It says only that a new account waits for approval and contains no personal data of that person.

Recipient: Cloudflare, Inc. as our processor (hosting, database and email routing). The information on transfers to the USA above applies. We do not use web analytics in the members area.

Cookie: after you log in, one session cookie named "sa_session" is set. It keeps you logged in, is strictly necessary for the log-in, is not used for tracking and is deleted when you log out or after 30 days at the latest. It is only sent to the members area.

Retention: we delete your FTP when you delete it or when your account is deleted, votes no later than 30 days after a vote has closed, and answers to rides 30 days after the ride (the ride itself after 90 days). Your calendar link is deleted when you revoke it or leave. Accounts that have not been approved are deleted automatically after 30 days. We delete an account on request, on withdrawal of consent and when a member leaves the collective. Write to hello@stayaverage.cc to have your data deleted or corrected.

Tools

The calculators under /tools/ run in your browser. What you enter is not sent to us and not stored. The setup you choose is only kept in the address of the page, so you can share it. If you install the tools on your phone, your browser keeps a copy of the page files so that they also open without a connection. This copy contains no personal data and no inputs.

Contact by email

If you write to us, we use your email address and your message only to answer you. Legal basis: our legitimate interest in answering enquiries, Art. 6(1)(f) GDPR, or the preparation of an agreement you asked for, Art. 6(1)(b) GDPR. We delete the messages when they are no longer needed.

Links to other websites

This website links to our profiles on Instagram and Strava. These are plain links: no content from these websites is embedded, and no data is sent to them until you click. After that, their own privacy policies apply.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Write to hello@stayaverage.cc. Where processing is based on consent, you can withdraw it at any time.

You can also lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at.

Last updated: 11 October 2026