Privacy

You bring your own data, we make your report, and we keep nothing.

October 2026. Caffecter is run by Paul Curtis, who is responsible for what happens to your data here.

What you send

Your Director Sportif recording. Before it leaves your computer, your browser takes out your name, your Zwift id, your Zwift profile (apart from weight, height and FTP), Sauce's ride statistics and your heart rate. What's left about you: your power, speed, cadence, position on the road and draft.
Other riders in that recording are already only positions on the road, speed and the draft they got, each under a random id the Director Sportif makes up for that one recording. No names, no Zwift ids, no power, no heart rate, nothing about their bodies. The Director Sportif drops other riders' heart rate before it saves anything at all.
The numbers you type in (weight, height, FTP, FRC, bike, wheels), if you do.
Your video's YouTube link, if you give it: only to put links to your own video in your report.
For your bike picks (the race card page): your height, weight, power, Zwift level and the bikes you own go to our server to work out the answer and aren't kept. Your browser remembers them for next time; clear your browser's site data to forget them.

We run the Director Sportif's meters over your ride and send the report page back to you.
Your browser encrypts the file before it leaves your computer, with a key only our report program can use: the key's secret half is kept in Amazon's key vault (AWS KMS) and never leaves it, and nothing else of ours (the website, the storage, the part that hands out upload links) is allowed to use it. The encrypted file goes to a private storage bucket; the report program opens it once, makes your report and deletes the file. If you never ask for the report (say you close the page during the upload), the bucket deletes the file by itself within two days. There is no database, and nothing from the file is logged.
We don't keep the report either. It waits, encrypted at rest in the same private bucket, only until your page collects it (seconds after it's made), and is deleted as it's collected; if the page was closed first, the bucket deletes it within two days. The page you save is the only copy.
No account, no sign-in, no tracking cookies, no ads.
No third parties: the site loads no outside scripts, fonts, analytics or trackers. Links to YouTube and GitHub only open those sites when you click them.
Our report programs keep a short log for 14 days so we can fix faults: when each ran, how long it took, and an error message if it failed. No IP address, nothing from your file and none of the numbers you typed.

We handle your file because you ask us to make your report from it. Other riders appear only as positions under made-up ids we can't trace back to anyone; we use them only for your report, which is in our and their legitimate interest in fair, useful race analysis, and we keep nothing.
Under the GDPR and similar laws you have the right to know what we hold about you, to have it corrected or deleted, and to object. Since we keep nothing once your report is sent, there is usually nothing to look up, but ask us any time. If you're in the EU or UK you can also complain to your data protection authority.
The site isn't meant for children under 16.
If this page changes, the date at the top changes with it.