Privacy Policy
Last updated 17 August 2026
Who is responsible
Michel Tucker, Fehrbelliner Strasse 45, 10119 Berlin, Germany, is the controller for personal data processed on marathon-weekend.com. You can reach us at michel@marathon-weekend.com.
What we collect and why
Browsing the directory needs no account and collects nothing beyond the anonymous usage analytics described below.
If you create an account we process your email address, the six-digit sign-in code we send to it, the first and last name you give us, what best describes you (runner, spectator, brand, organizer or other), where you heard about us, and the races you tell us you are running next. We use these to run your account, sign you in, and show you what you have saved. Legal basis: performance of a contract with you (Art. 6(1)(b) GDPR). Name, persona and referral are needed to complete sign-up, the next-race answer is optional.
If you save an event we store which events you saved and when, so they follow you across devices. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
If you subscribe to the newsletter we store your email address with our email provider and send you what you signed up for until you unsubscribe. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the link in every email.
We collect anonymous usage analytics (which pages are viewed, in aggregate) to understand how the site is used. Signed-in users are identified to our analytics provider by a random account id, never by email or name. Legal basis: our legitimate interest in improving the site (Art. 6(1)(f) GDPR).
We do not sell your data and we do not share it with anyone for their own marketing.
Who processes it for us
We use service providers who process data on our behalf and under our instructions: Supabase (accounts and database), Vercel (hosting and content delivery), Loops (transactional and newsletter email), Cloudflare Turnstile (spam and abuse protection on forms), Amplitude (usage analytics, EU servers), Google Analytics (usage analytics), Sentry (error reporting), Apple Maps and Sanity (map tiles and editorial content, no account data). Where a provider processes data outside the EU, transfers rest on the EU Standard Contractual Clauses or an adequacy decision.
How long we keep it
Account data is kept until you delete your account. Deleting it removes your profile, your saved events and your sign-in identity. Sign-in codes expire after ten minutes. Newsletter data is kept until you unsubscribe. Analytics data is retained by the providers under their standard retention and is not tied to your name.
Cookies and local storage
Signing in sets a session cookie so the site knows it is you. The site also keeps small settings in your browser, such as your recently viewed events. Analytics providers set their own cookies as described in their policies. You can clear all of this in your browser at any time, which signs you out.
Your rights
You have the right to access the personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to its processing, and to receive it in a portable format (Art. 15 to 21 GDPR). You can change your name and next races and delete your account yourself under Settings when signed in. For anything else, or if you have no account, write to michel@marathon-weekend.com and we will answer within a month.
You also have the right to lodge a complaint with a data protection authority. For us that is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, but you may contact the authority where you live.
Changes
We will update this page when what we do changes. The date at the top tells you when it was last revised.