Acceptable Use Policy

Strava · agreement dated July 2, 2025 · Official agreement

Read the agreement

55 of 55 cards

Legal Rights & Agreement Rules · Restriction or exception

You agree to follow this policy and the Community Standards

As part of using Strava's Services under its Terms of Service, you agree to follow this Acceptable Use Policy and the Strava Community Standards. This version is dated July 2, 2025.

Supporting quotations

Effective Date: July 2, 2025
As part of your use of Strava’s Services under Strava’s Terms of Service, you agree to follow this Acceptable Use Policy and the Strava Community Standards.

Qualifications & exceptions

  • The agreement attaches to your use of Strava's Services under the Terms of Service.

Not stated here

  • The linked Terms of Service and Community Standards are separate documents; their text is not supplied in this document, so what they add is not stated here.

Legal Rights & Agreement Rules · Restriction or exception

Listed examples are not exhaustive; Strava may make exceptions

Each policy section lists examples of prohibited content and behavior. The lists are not exhaustive and will be updated as needed. Where appropriate, Strava may make exceptions to these policies for educational, documentary, scientific, artistic or other public interest reasons.

Supporting quotations

Each policy below includes examples of content and behaviors that are prohibited; they are not exhaustive and will be updated as needed to keep the community safe and healthy.
Where appropriate, we may make exceptions to these policies based on educational, documentary, scientific, artistic, or other public interest considerations.

Qualifications & exceptions

  • An exception is discretionary: Strava 'may' make one 'where appropriate'.

Not stated here

  • The policy does not say how Strava decides when an exception applies, that a user can request one, or how users are told of updates to the examples.

Cross-references

  • contrast (model-proposed): Child sexual abuse and exploitation content is prohibited — contrast: The policy says Strava may make exceptions to 'these policies' where appropriate, yet states zero tolerance for child sexual abuse and exploitation; the document does not say whether the exceptions can apply to child safety.

Account & Service Control · Company practice

Violations can lead to content removal or account-level action

If Strava finds content or behavior that violates these policies, it says it will take appropriate actions, including potentially removing the content or taking account-level actions. You can report content that may violate the policies for Strava to review, and there are appeals procedures for someone who believes they received an account enforcement action in error.

Supporting quotations

If we find content or behavior that violates these policies, we will take appropriate actions including potentially removing the content or taking account-level actions.
You can also report content that may violate our policies for us to review.
We have appeals procedures if someone believes they have received an account enforcement action in error.

Qualifications & exceptions

  • Removal is stated as a possibility ('potentially'), and Strava decides what action is 'appropriate'.
  • Appeals are described for account enforcement actions, in this overview.

Not stated here

  • This overview does not list the specific actions; the later enforcement, reporting and appeals sections of the policy give more detail.

Cross-references

  • related (model-proposed): Range of enforcement actions, including suspension — references: The overview says violations lead to appropriate actions including potential removal or account-level action; the enforcement section lists the range of actions in detail.

Content & IP Rights · Restriction or exception

Child sexual abuse and exploitation content is prohibited

Strava says it has zero tolerance for child sexual abuse and exploitation. Its examples of prohibited content include nude images of children, sexually explicit imagery depicting a child (photorealistic or cartoon), sexualizing children through comments, poses or cropping, promoting or normalizing sexual exploitation of children, contacting a child for sexual exploitation or sexual solicitation (grooming), and jokes or memes normalizing children in sexual acts.

Supporting quotations

We have zero tolerance for child sexual abuse and exploitation on Strava.
Nude images of children
Sexually explicit imagery (including photorealistic or cartoon) depicting a child
Sexualization of children through comments, poses, cropping, etc.
Promoting, glorifying or normalizing sexual exploitation of children
Contact with a child for sexual exploitation and any sexual solicitation (grooming)
Jokes or memes or any content normalizing children in sexual acts

Qualifications & exceptions

  • The examples are illustrative, not an exhaustive list.

Legal Rights & Agreement Rules · Company commitment

Child exploitation content is removed and reported as required by law

For child sexual abuse and exploitation content, Strava says it will remove it and report it as required by law.

Supporting quotations

We will remove and report such content as required by law.

Qualifications & exceptions

  • The reporting commitment is limited to what the law requires.

Not stated here

  • The policy does not say to whom such content is reported or what information is included.

Content & IP Rights · Restriction or exception

Dangerous, violent and graphic content is not allowed

Strava does not allow dangerous, violent or graphic content. It defines dangerous content as content that can likely cause serious harm or injury, violent content as content that depicts, glorifies, justifies, facilitates or promotes violence, and graphic content as content that elicits reactions of shock, disgust or distress.

Supporting quotations

We do not allow dangerous, violent, or graphic content on Strava.
Dangerous content is content that can likely cause serious harm or injury.
Violent content is content that depicts, glorifies, justifies, facilitates, or promotes violence.
Graphic content is content that elicits reactions of shock, disgust, or distress.

Not stated here

  • The policy does not say who judges whether content 'elicits reactions of shock, disgust, or distress'.

Content & IP Rights · Restriction or exception

Examples: dangerous items and activities, and violence

Examples of prohibited content include instructions for building or selling dangerous items, instructions for misusing inherently dangerous items, dangerous activities and challenges that pose significant risk to health or that are safe only for qualified individuals, imagery of violent acts, threats of violence against a person or group, content advocating, inciting, normalizing or glorifying violence, instructions for committing violent activities, and content promoting human trafficking and migrant smuggling.

Supporting quotations

Instructions for building or selling dangerous items
Instructions for misusing inherently dangerous items
Dangerous activities and challenges which pose significant risk to health when performed or are safe to be performed only by qualified individuals
Imagery of violent acts
Threats of violence against a person or a group of people
Content advocating, inciting, normalizing, or glorifying violence
Instructions for committing violent activities
Content promoting human trafficking and migrant smuggling

Qualifications & exceptions

  • The activities-and-challenges example is limited to activities that pose significant risk to health or are safe to be performed only by qualified individuals.

Not stated here

  • The policy does not say which specific activities meet the 'significant risk' or 'qualified individuals' description.

Content & IP Rights · Restriction or exception

Examples: animal abuse, terrorist content and graphic imagery

Examples of prohibited content also include content showing abuse of animals or graphic imagery of animals intended for shock or disgust, terrorist or radical extremist content (such as praising terrorism, sharing manifestos, images or logos of terrorist organizations, recruiting or fundraising for them, or sharing content they produce), content showing dead bodies or dismembered or mutilated human or animal body parts, and gratuitous sharing of imagery of bodily fluids like blood and vomit shared with the intent to shock or disgust.

Supporting quotations

Content showing abuse of animals or any graphic imagery of animals intended for shock or disgust
Terrorist or radical extremist content such as content praising acts of terrorism, sharing manifestos, images or logos associated with terrorist organizations, recruiting or fundraising for terrorist organizations, or sharing content produced by terrorist organizations.
Content showing dead bodies or dismembered or mutilated body parts of humans or animals
Gratuitous sharing of imagery of bodily fluids like blood and vomit shared with the intent to shock or disgust

Qualifications & exceptions

  • The animal imagery and bodily-fluid examples turn on an intent to shock or disgust (the bodily-fluid example also requires the sharing to be gratuitous).

Content & IP Rights · Restriction or exception

Fraudulent, false, deceptive or misleading content is not allowed

Strava does not allow content that is fraudulent or contains false, deceptive or misleading statements, claims or representations.

Supporting quotations

We do not allow content that is fraudulent or contains false, deceptive, or misleading statements, claims or representations.

Not stated here

  • The policy does not say how Strava decides whether a statement is false or misleading.

Content & IP Rights · Restriction or exception

Examples of prohibited false or misleading content

Examples include false or misleading content about health or medical information or civic processes; false or misleading information about events or topics that can incite violence or create serious safety risks (such as wildfires or active shootings); conspiracy theories (such as denying well-documented violent events); manipulated media designed to deceive or defraud by altering a reasonable person's understanding of real-world events with potential for significant harm; and the targeted sharing of misleading content intended to undermine faith in another country's public institutions.

Supporting quotations

False or misleading content about health or medical information
False or misleading content about civic processes
False or misleading information about events or topics that can incite violence or create serious safety risks (e.g., misleading information related to wildfires or active shootings)
Conspiracy theories (e.g., denying well-documented violent events)
Manipulated media designed to deceive or defraud someone by altering a reasonable person's understanding of real world events with potential to cause significant harm to individuals or groups
The targeted sharing of misleading content with the intent of undermining faith in public institutions of another country

Qualifications & exceptions

  • The manipulated-media example requires a design to deceive or defraud and potential to cause significant harm to individuals or groups.
  • The public-institutions example requires targeted sharing with the intent of undermining faith in public institutions of another country.
  • The events example is limited to information that can incite violence or create serious safety risks.

Content & IP Rights · Restriction or exception

Intimidating and threatening content is not allowed

Strava does not allow content that intimidates or causes someone to fear for their safety. Examples include personal attacks targeting someone with insults, profanity, offensive language, unwanted sexualization or other malicious acts; threatening others or wishing harm or death on them; and mocking or belittling someone's personal loss.

Supporting quotations

We do not allow content that intimidates, or causes someone to fear for their safety.
Personal attacks targeting someone with insults, profanity, offensive language, unwanted sexualization, or any other malicious acts
Threatening others or wishing harm or death on them
Mocking or belittling someone’s personal loss

Content & IP Rights · Restriction or exception

Harassment examples: intimate imagery, brigading, doxxing and misuse of reporting

Examples of prohibited harassment also include sharing or threatening to share non-consensual explicit or intimate imagery; coordinated targeting of another Strava community or account through mass commenting, spamming and harassment (brigading); creating accounts dedicated to harassment, brigading or repeated unwanted contact; misusing Strava's reporting mechanisms to harass someone; and doxxing, or encouraging others to harass, dox or brigade.

Supporting quotations

Sharing or threatening to share non-consensual explicit or intimate imagery
Coordinated targeting of another Strava community or account through actions like mass commenting, spamming, and harassment (brigading)
Creating accounts dedicated to harassment, brigading, or repeated unwanted contact
Misuse of our reporting mechanisms to harass someone
Doxxing, or encouraging others to harass, dox, or brigade

Content & IP Rights · Restriction or exception

Hateful content about groups is not allowed

Strava does not allow hateful content, which it defines as content that attacks, demeans, discriminates, or promotes harmful stereotypes about a group of people based on race, ethnicity, age, national origin, religious affiliation, sexual orientation, caste, sex, gender, gender identity, serious disease, disability, body type or immigration status.

Supporting quotations

We do not allow hateful content on Strava. Hateful content is content that attacks, demeans, discriminates, or promotes harmful stereotypes about a group of people based on their race, ethnicity, age, national origin, religious affiliation, sexual orientation, caste, sex, gender, gender identity, serious disease, disability, body type, or immigration status.

Qualifications & exceptions

  • The definition covers content that attacks, demeans, discriminates or promotes harmful stereotypes about a group on the listed bases.

Not stated here

  • The examples refer to a 'protected category' or 'protected categories' without a separate definition; the list in this definition is the closest statement of the bases.

Content & IP Rights · Restriction or exception

Examples of prohibited hateful content

Examples include hate symbols and images; dehumanizing a group based on a protected category (for instance comparing them to animals, pests or diseases); directing profanity and hateful slurs at members of a protected category; praising, justifying, glorifying, inciting or encouraging violence against a group based on protected categories; claiming a group is inherently inferior to another; implicit and explicit threats against a group associated with a protected category; and negative generalizations or harmful stereotypes associated with protected categories.

Supporting quotations

Hate symbols and images
Dehumanizing a group based on their protected category, such as by comparing them to animals, pests, or diseases.
Directing profanity and hateful slurs at members of a protected category
Praising, justifying, glorifying, or inciting violence against a group based on protected categories
Encouraging or advocating violence against a protected group
Claiming a group is inherently inferior (intellectually, morally, physically, etc.) than another group based on protected categories
Implicit and explicit threats against a group associated with any protected category
Negative generalizations or harmful stereotypes associated with protected categories

Qualifications & exceptions

  • Each example is tied to a protected category or a group associated with one.

Not stated here

  • The policy does not define 'protected category' separately from the characteristics listed in its definition of hateful content.

Content & IP Rights · Company commitment

Personal information or images shared by others without consent are removed

Strava says it respects users' privacy and aims to keep its communities safe from harm. It will remove personal information or personal images that are shared by others without consent.

Supporting quotations

We will remove personal information or personal images shared by others without consent.

Qualifications & exceptions

  • The removal commitment is for personal information or images shared by others without consent.

Not stated here

  • The policy does not say how consent is established or how quickly removal happens.

Content & IP Rights · Context

What counts as personal information under this policy

Personal information covers contact information (physical address, email, social media handles or phone number), government-issued identifications (such as a driver's license, social security number, resident registration or identity card, passport details or taxpayer ID), financial information (such as bank accounts, credit card numbers and associated log-in info), and highly personal and restricted records like medical records.

Supporting quotations

Personal information covers:
Contact information such as physical address, email, social media handles, or phone number
Government-issued identifications such as drivers license, social security numbers, resident registration or identity cards, passport details, or taxpayer IDs
Financial information such as bank accounts, credit card numbers, and associated log-in info
Highly personal and restricted records like medical records

Qualifications & exceptions

  • The items are illustrated with 'such as'; the list is described as what personal information 'covers'.

Content & IP Rights · Procedure

Personal images and how to report ones shared without consent

Personal images are images of an individual where they are identifiable from the image itself or from the image combined with apparent metadata. The policy points to a Strava help page for reporting a photo or video shared without your consent, and says to report sharing of intimate or sexual images without consent as harassment.

Supporting quotations

Personal images are images of an individual where they are identifiable based on their image itself or a combination of image and apparent meta data.
for details on reporting a photo or video shared without your consent.
Please report the sharing of intimate or sexual images without consent as harassment.

Qualifications & exceptions

  • An image counts as a personal image only where the individual is identifiable, from the image itself or from the image combined with apparent metadata.

Not stated here

  • The linked help page's reporting instructions are separate and not supplied in this document, so the steps for reporting are not stated here.

Cross-references

Content & IP Rights · Restriction or exception

Content facilitating trade, marketing, making or use of restricted goods is not allowed

Strava does not allow content that facilitates the trade, marketing, manufacturing or use of restricted goods. Restricted goods are products governed by laws that restrict their manufacture, purchase, sale or ownership in order to ensure user safety.

Supporting quotations

We do not allow content on Strava that facilitates the trade, marketing, manufacturing or use of restricted goods.
Restricted goods refer to products that are governed by laws that restrict the manufacturing, purchase, sale, or ownership of the goods in order to ensure user safety.

Qualifications & exceptions

  • The prohibition is on content that facilitates trade, marketing, manufacturing or use, not on every mention of such goods.

Content & IP Rights · Context

Goods the policy lists as restricted

Restricted goods include alcohol and tobacco products (including nicotine and vaping products); firearms, explosives and other weapons; regulated health and medical devices; endangered animals; and illegal drugs, prescription and over-the-counter drugs, and unapproved supplements.

Supporting quotations

Restricted goods include:
Alcohol and tobacco products (including nicotine and vaping products)
Firearms, explosives, and other weapons
Regulated health and medical devices
Endangered animals
Illegal drugs, prescription and over-the-counter drugs, unapproved supplements

Qualifications & exceptions

  • The list is introduced as what restricted goods 'include'.

Not stated here

  • The policy does not say how 'unapproved' supplements are determined or which authority's approval applies.

Content & IP Rights · Restriction or exception

Examples: selling, making, circumventing or glorifying restricted goods

Examples of prohibited content include facilitating the sale, purchase, exchange or donation of restricted goods; instructions for manufacturing a restricted good; instructions on circumventing regulated access measures; and glorifying or glamorizing use of restricted goods.

Supporting quotations

Facilitating sale, purchase, exchange or donation of restricted goods
Instructions for manufacturing a restricted good
Instructions on circumventing regulated access measures
Glorifying or glamorizing use of restricted goods

Content & IP Rights · Restriction or exception

Sexually explicit or exploitative content is not allowed

Strava does not allow sexually explicit or exploitative content, which it describes as material that contains textual descriptions or visual depictions of nudity or sexual activities.

Supporting quotations

We do not allow sexually explicit or exploitative content on our platform. Sexual content refers to material that contains textual descriptions or visual depictions of nudity or sexual activities.

Content & IP Rights · Restriction or exception

Examples of prohibited sexual content

Examples include nudity or any sexually explicit content; sharing sexual or private imagery obtained or published without consent; sexual abuse; coercing people into sexual acts for commerce; using intimate, naked or sexual photos or videos to blackmail someone; gratuitous sharing of sexual imagery of others; and sexual solicitation or any sexually obscene content.

Supporting quotations

Nudity or any sexually explicit content
Sharing imagery that is private or sexual in nature obtained or published without consent
Sexual abuse
Sexual exploitation of people by coercing them to perform sexual acts for commerce
Use of intimate, naked or sexual photos or videos to blackmail someone to pay money or do something against their will
Gratuitous sharing of sexual imagery of others
Sexual solicitation or any sexually obscene content

Qualifications & exceptions

  • The imagery example turns on it being obtained or published without consent, and the sharing example on it being gratuitous.

Content & IP Rights · Restriction or exception

Content that promotes suicide, self-harm or eating disorders is not allowed

Strava does not allow content that shows, promotes, facilitates or encourages suicide, self-harm or eating disorders. The policy adds a message that someone who is in danger should please get help and points to a list of support organizations.

Supporting quotations

We do not allow content on Strava that shows, promotes, facilitates, or encourages suicide, self-harm, or eating disorders.
If you or someone you know is in danger, please get help.

Not stated here

  • The linked list of support organizations is an outside page; its contents are not supplied in this document.

Content & IP Rights · Context

How suicide, self-harm and eating disorder content is defined

Suicide content is text or media depicting suicide or suicidal ideation or attempts. Self-harm content is text or media related to someone harming themselves on purpose. Eating disorders cover eating and exercise behaviors that seriously affect the ability of a person to get the nutrients the body needs, thereby affecting their health significantly.

Supporting quotations

Suicide content refers to text or media depicting suicide or suicidal ideation or attempts. Self-harm content refers to text or media related to someone harming themselves on purpose. Eating disorders cover eating and exercise behaviors that seriously affect the ability of a person to get the nutrients the body needs, thereby affecting their health significantly.

Qualifications & exceptions

  • The eating-disorder definition is limited to eating and exercise behaviors that seriously affect the ability to get needed nutrients and significantly affect health.

Not stated here

  • The policy does not say how Strava decides whether a particular post meets the eating-disorder definition.

Content & IP Rights · Restriction or exception

Examples of prohibited suicide, self-harm and eating disorder content

Examples include depicting suicide or self-harm; showing or linking to sites or communities that feature or promote suicide, self-harm or eating disorders; sharing plans for carrying out suicide, self-harm or engaging in eating disorders; providing instructions for harming oneself; glorifying suicide, self-harm and eating disorders; encouraging suicidal ideation and planning; and minimizing or mocking people for experiences related to them.

Supporting quotations

Depicting suicide or self-harm
Showing or linking to sites or communities that feature or promote suicide, self-harm, and eating disorders
Sharing plans for carrying out suicide, self-harm or engaging in eating disorders
Providing instructions for harming oneself
Glorifying suicide, self-harm, and eating disorders
Encouraging suicidal ideation and planning
Minimizing or mocking people for experiences related to suicide, self-harm, or eating disorders

Content & IP Rights · Restriction or exception

Inauthentic or disruptive content and behavior is not allowed

Strava does not allow content or behaviors that are inauthentic or that cause disruption within its communities or to Strava systems. The section then lists examples of prohibited content and behaviors.

Supporting quotations

We do not allow content or behaviors that are inauthentic or cause disruption within our communities or to Strava systems.
Examples of prohibited content and behaviors:

Qualifications & exceptions

  • The examples that follow are illustrative; the policy elsewhere says its example lists are not exhaustive.

Content & IP Rights · Restriction or exception

Examples: manipulating leaderboard data and posting inauthentic activities

Examples of inauthentic content and behavior include manipulating data used for leaderboards and posting activities that do not reflect authentic activities completed by you.

Supporting quotations

Inauthentic content and behaviors, including
Manipulating data used for leaderboards
Posting activities that do not reflect authentic activities completed by you

Qualifications & exceptions

  • The activities example is limited to activities that do not reflect authentic activities completed by the person posting them.

Content & IP Rights · Restriction or exception

Examples: impersonation, deception and steering users off the platform

Examples of inauthentic behavior also include directing users outside of the platform to participate in financial schemes, sexual exploitation, or to otherwise encourage inauthentic interactions; impersonating a person, company or brand; and misrepresenting oneself to deceive others.

Supporting quotations

Directing users outside of the platform to participate in financial schemes, sexual exploitation, or to otherwise encourage inauthentic interactions
Impersonation of a person, company, or brand
Misrepresenting oneself to deceive others

Security & Safeguards · Restriction or exception

Examples: automated systems, bulk accounts and burdensome load

Examples of excessive automated, bulk, spammy or burdensome activity include using any automated system (such as robots, spiders or offline readers) to access the Services in a way that sends more requests than a human could reasonably produce with a conventional web browser; creating accounts in bulk; using extensions or other means to bypass limits on automated interactions such as kudos or comments; and any action that imposes, or may impose, an unreasonable or disproportionately large load on Strava's infrastructure, which Strava judges at its sole discretion.

Supporting quotations

Excessive automated, bulk, spammy, or burdensome activity, including
Using any automated system, including “robots,” “spiders,” “offline readers,” to access the Services in a manner that sends more requests to Strava than a human can reasonably produce in the same period of time by using a conventional web browser
Creating accounts in bulk
Using extensions or other means to bypass limits on automated interactions such as kudos or comments
Taking any action that imposes, or may impose, at our sole discretion, an unreasonable or disproportionately large load on our infrastructure

Qualifications & exceptions

  • The automation example is measured against what a human could reasonably produce in the same period using a conventional web browser.
  • Whether a load is unreasonable or disproportionately large is determined at Strava's sole discretion, and the example covers actions that may impose such a load.

Cross-references

Content & IP Rights · Restriction or exception

Example: unsolicited or repetitive posting to get attention or promote a business

Under inflammatory or disruptive behavior, Strava lists posting, commenting or otherwise creating content in an unsolicited or repetitive manner to get attention, gain more followers, advertise or promote a business.

Supporting quotations

Inflammatory or disruptive behavior, including
Posting, commenting, or otherwise creating content in an unsolicited or repetitive manner to get attention, gain more followers, advertise, or promote a business

Qualifications & exceptions

  • The example turns on the content being unsolicited or repetitive and made for attention, followers, advertising or business promotion.

Content & IP Rights · Restriction or exception

Examples: significantly or repeatedly disrupting other users

Significantly or repeatedly disrupting the experience of other Strava users is prohibited, with examples: posting content unrelated to a club's purpose in that club; repeatedly requesting followers, kudos, club joins or engagement to rapidly amplify the reach of your content; posting the same content in multiple places; posting objectionable content in public surfaces such as segments or routes; and coordinating a social media campaign on Strava or other platforms to request a new product feature or change outside of the Developer Hub, or to try to get Strava to revisit a decision.

Supporting quotations

Significantly or repeatedly disrupting the experience of other Strava users, such as
Posting content that is unrelated to the purpose of a club in that club
Repeatedly requesting followers, kudos, club joins, or engagement to rapidly amplify the reach of your content
Posting the same pieces of content in multiple places
Posting objectionable content in public surfaces, such as segments or routes on Strava
Coordinating a social media campaign on Strava or other platforms to request a new product feature or product change outside of the Developer Hub, or to attempt to get Strava to revisit a decision

Qualifications & exceptions

  • The examples are introduced as significant or repeated disruption of other users' experience.
  • The campaign example covers campaigns on Strava or on other platforms, and is limited to requests made outside of the Developer Hub.

Not stated here

  • The policy does not say what counts as 'objectionable content' on public surfaces beyond this example.

Account & Service Control · Restriction or exception

Evading an enforcement action is prohibited

Evading an enforcement action, for example by creating a new account after being suspended, is listed as a prohibited behavior.

Supporting quotations

Evading an enforcement action, for example by creating a new account after being suspended.

Qualifications & exceptions

  • Creating a new account after a suspension is given as an example, not the only form of evasion.

Cross-references

Security & Safeguards · Restriction or exception

Malicious content and phishing are prohibited

Prohibited content includes content that is harmful to or interferes with Strava's or any third party's networks, equipment, applications, services or websites (for example viruses, worms or Trojan horses), and content intended to or likely to deceive, mislead or defraud others through phishing or social engineering techniques.

Supporting quotations

Content that is malicious or harmful to systems:
Content that is harmful to or interferes with Strava’s or any third party’s networks, equipment, applications, services or websites (e.g., viruses, worms, Trojan horses)
Content that is intended to or likely to deceive, mislead, or defraud others through phishing or social engineering techniques

Qualifications & exceptions

  • The harm covers third parties' systems as well as Strava's.
  • The deception limb covers content intended to, or likely to, deceive, mislead or defraud through phishing or social engineering.

Security & Safeguards · Restriction or exception

Unauthorized access or use of Strava, and malicious activity against it, are prohibited

Strava does not allow unauthorized access or unauthorized use of Strava, and prohibits any harmful or malicious activity against its websites, related mobile applications and services. The policy calls these the 'Services' for the rest of the security section.

Supporting quotations

We do not allow unauthorized access or unauthorized use of Strava.
We also prohibit any harmful or malicious activity against our websites, related mobile applications, and services (referred to collectively as “Services” below).

Qualifications & exceptions

  • 'Services' means Strava's websites, related mobile applications and services, as used in the security section.

Security & Safeguards · Restriction or exception

Accessing, harvesting or distributing the Services outside authorized means

Under 'Unauthorized access or use of information', the policy prohibits accessing any content on the Services through any technology or means other than those the Services provide or authorize; collecting or harvesting information relating to an identified or identifiable individual, including account names and information about users, from the Services; and distributing or disclosing any part of the Services in any medium, including by automated or non-automated 'scraping'.

Supporting quotations

Unauthorized access or use of information
Accessing any content on the Services through any technology or means other than those provided or authorized by the Services
Collecting or harvesting any information relating to an identified or identifiable individual, including account names and information about users of the Services, from the Services
Distributing or disclosing any part of the Services in any medium, including by any automated or non-automated “scraping”

Qualifications & exceptions

  • The harvesting example covers information relating to an identified or identifiable individual, including account names and information about users.
  • Distributing or disclosing any part of the Services is prohibited in any medium, whether scraping is automated or not.

Not stated here

  • The policy does not say whether sharing your own activity data or content through authorized features is covered by the distribution rule.

Security & Safeguards · Restriction or exception

Using the Services in a way they are not intended is prohibited

The policy prohibits using the Services in a manner for which they are not intended, as determined at Strava's sole discretion, with employee tracking and automotive mileage reimbursement purposes given as examples.

Supporting quotations

Using the Services in a manner for which they are not intended, at our sole discretion, (e.g., employee tracking or automotive mileage reimbursement purposes)

Qualifications & exceptions

  • Whether a use is not intended is determined at Strava's sole discretion.
  • Employee tracking and automotive mileage reimbursement are examples (introduced with 'e.g.'), not a complete list.

Not stated here

  • The policy does not list other uses that Strava treats as not intended.

Security & Safeguards · Restriction or exception

Submitting personally identifiable information is limited to what account operation needs

The policy prohibits submitting to the Services or to Strava any personally identifiable information, except as necessary for the establishment and operation of your account.

Supporting quotations

Submitting to the Services or to Strava any personally identifiable information, except as necessary for the establishment and operation of your account

Qualifications & exceptions

  • The exception is for personally identifiable information necessary for the establishment and operation of your account.

Not stated here

  • The policy does not define 'personally identifiable information' or say how it applies to profile details, photos or other content users post.

Security & Safeguards · Restriction or exception

Network monitoring and packet interception are prohibited

The policy prohibits network monitoring, or running a network analyzer, packet sniffer or other technology to intercept, decode, mine or display packets used to communicate between the Service's servers, or any data not intended for you.

Supporting quotations

Executing any form of network monitoring or running a network analyzer or packet sniffer or other technology to intercept, decode, mine, or display any packets used to communicate between the Service's servers or any data not intended for you

Security & Safeguards · Restriction or exception

Prohibited uses: monitoring, third-party access, copying and bypassing protections

Under 'Unauthorized use of the Services', the policy prohibits accessing the Services to monitor their availability, performance or functionality; permitting any third party to access the Services unless approved by Strava; copying, framing or mirroring any part of the Services; bypassing measures Strava may use to prevent or restrict access, including features that prevent or restrict use or copying of any content; and removing copyright, trademark or other proprietary rights notices on the Services.

Supporting quotations

Unauthorized use of the Services
Accessing the Services to monitor its availability, performance, or functionality
Permitting any third party to access the Services unless approved by Strava
Copying, framing, or mirroring any part of the Services
Bypassing the measures we may use to prevent or restrict access to the Services, including features that prevent or restrict use, or copying of any content
Removing any copyright, trademark, or other proprietary rights notices contained in or on the Services

Qualifications & exceptions

  • Third-party access is allowed only if approved by Strava.

Not stated here

  • The policy does not say how a third party obtains Strava's approval.

Security & Safeguards · Restriction or exception

Reverse engineering and extracting source code

The policy prohibits using, copying, modifying, creating a derivative work of, reverse engineering, decompiling or otherwise attempting to extract the source code of the software underlying the Services or any part of it, unless expressly permitted or required by law, and in any case without providing prior written notice to Strava.

Supporting quotations

Using, copying, modifying, creating a derivative work of, reverse engineering, decompiling or otherwise attempting to extract the source code of the software underlying the Services or any part thereof, unless expressly permitted or required by law, and in any case, without providing prior written notice to Strava

Qualifications & exceptions

  • The rule has a carve-out for what is expressly permitted or required by law, and the sentence also refers to doing so 'without providing prior written notice to Strava'.

Not stated here

  • The sentence does not make clear whether prior written notice to Strava is required even where the law permits or requires the activity, or how the legal exception and the notice wording fit together.

Security & Safeguards · Restriction or exception

Disrupting the Services and security-probing activity are prohibited

Under 'Harmful or malicious activity', the policy prohibits attempting to disrupt, degrade, impair or violate the confidentiality, integrity or availability of the Services or of other parties' computers, services, accounts or networks, including denial of service attacks. It also prohibits any activity that typically precedes attempts to breach security, such as scanning, probing or other testing or vulnerability assessment, and engaging in or permitting network or hosting activity that results in a deny list or other blockage of Strava's internet protocol space.

Supporting quotations

Harmful or malicious activity
Attempting to disrupt, degrade, impair or violate the confidentiality, integrity, or availability of the Services or the computers, services, accounts, or networks of any other party including denial of service attacks
Any activity that typically precedes attempts to breach security such as scanning, probing, or other testing or vulnerability assessment activity, or engaging in or permitting any network or hosting activity that results in a deny list or other blockage of Strava internet protocol space

Qualifications & exceptions

  • The security-precursor rule covers activity that 'typically precedes' breach attempts, such as scanning, probing and vulnerability assessment, and does not describe an authorization route for security testing.

Not stated here

  • The policy does not say whether any authorized or good-faith vulnerability testing is allowed.

Content & IP Rights · Restriction or exception

Posting content that infringes intellectual property is prohibited

Strava expects everyone using it to abide by the relevant laws that apply to them, and prohibits posting content that infringes, dilutes, misappropriates or otherwise violates any intellectual property, including copyrights, patents, trademarks, trade secrets or other proprietary information, including unauthorized use of domain names.

Supporting quotations

We expect everyone using Strava to abide by all the relevant laws applicable to them.
Do not post content that infringes, dilutes, misappropriates or otherwise violates any intellectual property, including copyrights, patents, trademarks, trade secrets, or other proprietary information—including unauthorized use of domain names.

Legal Rights & Agreement Rules · Restriction or exception

Content that is illegal or promotes illegal activities is prohibited

Strava does not allow posting content that is illegal or promotes illegal activities, including in relation to sexual exploitation or abuse (including of minors), terrorist or radical extremist content, and export control or sanctions laws.

Supporting quotations

Additionally, do not post content that is illegal or promotes illegal activities, including in relation to:
Sexual exploitation or abuse, including of minors
Terrorist or radical extremist content
Export control or sanctions laws

Qualifications & exceptions

  • The list is introduced with 'including', so it is not limited to these topics.

Legal Rights & Agreement Rules · Restriction or exception

Violating privacy, publicity or other personal rights is prohibited

Within illegal content, the policy lists violating privacy, publicity or other personal rights, including defamation, doxxing, posting media you do not have permission to share, and sharing other people's personal information without their consent.

Supporting quotations

Violating any privacy, publicity, or other personal rights, including
Defamation
Doxxing
Posting media that you do not have permission to share
Sharing other people’s personal information without their consent

Qualifications & exceptions

  • The items are introduced with 'including'.

Cross-references

Legal Rights & Agreement Rules · Procedure

How to report content that violates the law or Strava's policies

You can report content you believe violates the law, Strava's Community Standards, this Acceptable Use Policy or any other part of Strava's Terms of Service by following the instructions in a Strava help article.

Supporting quotations

You can report content you believe violates the law or Strava’s Community Standards, this Acceptable Use Policy or any other part of Strava’s Terms of Service by following the instructions in this

Not stated here

  • The help article with the reporting instructions, and the linked Community Standards and Terms of Service, are separate pages whose text is not supplied here, so the reporting steps are not stated in this document.

Cross-references

Legal Rights & Agreement Rules · Procedure

EU users and officials are directed to a separate page for reporting illegal content

Official representatives of an EU Member State, Commission or Board, and EU users who intend to report content they believe is illegal, are directed to a separate help page about Strava and the European Union's Digital Services Act.

Supporting quotations

If you are an official representative of an EU Member State, Commission, or Board, or an EU user intending to report content you believe is illegal, please refer to this page.

Qualifications & exceptions

  • The direction applies to EU Member State, Commission or Board representatives and to EU users intending to report content they believe is illegal.

Not stated here

  • The linked Digital Services Act help page is a separate page whose text is not supplied here, so its process is not stated in this document.

Account & Service Control · Company commitment

Strava explains why a report may or may not have violated its policies

When processing user reports, Strava says it gives users information specifying why their report may or may not have violated its policies.

Supporting quotations

When processing user reports, we provide information to users specifying why their report may or may not have violated our policies.

Not stated here

  • The policy does not say how or when this information is delivered.

Account & Service Control · Restriction or exception

Repeated unfounded complaints can lead to a warning or suspension

Strava may warn or suspend an account that is found to be making repeated, unfounded complaints that Strava has already responded to and adequately addressed.

Supporting quotations

We may warn or suspend an account that is found to be making repeated, unfounded complaints that have already been responded to and adequately addressed by Strava.

Qualifications & exceptions

  • The action is a possibility ('may'), and it applies to repeated unfounded complaints that Strava has already responded to and adequately addressed.

Not stated here

  • The policy does not say who decides that complaints are unfounded or adequately addressed.

Cross-references

Account & Service Control · Company practice

Reported content is reviewed against the Terms, Community Standards or this policy

When content is reported to Strava, it reviews the content against its Terms of Service, Community Standards or this Acceptable Use Policy and takes appropriate enforcement actions, which it says protects the community from abuse and unwanted content and behavior.

Supporting quotations

When content is reported to us, we review the content against our Terms of Service, Community Standards, or this Acceptable Use Policy, and take appropriate enforcement actions. We do this to protect our community from abuse and unwanted content and behavior.

Qualifications & exceptions

  • The review is triggered when content is reported to Strava; Strava decides which enforcement actions are appropriate.

Not stated here

  • The linked Terms of Service and Community Standards are separate documents whose text is not supplied in this document.

Account & Service Control · Company practice

Factors Strava considers when reviewing content or an account

In reviewing a piece of content or an account for violation, Strava takes a number of factors into account, such as context, intent, the potential for harm, whether the account is a repeat offender, and whether its reporting mechanisms are being used to harass others.

Supporting quotations

We take a number of factors into account when reviewing a piece of content or account for violation such as context, intent, the potential for harm, whether the account is a repeat offender, and if our reporting mechanisms are being used to harass others.

Qualifications & exceptions

  • The factors are introduced with 'such as', so they are examples rather than a complete list.

Not stated here

  • The policy does not say how the factors are weighed.

Account & Service Control · Company practice

Range of enforcement actions, including suspension

Depending on the nature of the violation, Strava takes a range of actions, including but not limited to removing content, revoking or limiting access to features, sending a warning, a temporary account suspension, and, for more serious offenses, permanently suspending accounts from its services.

Supporting quotations

Depending on the nature of the violation, we take a range of actions including, but not limited to, removing content, revoking or limiting access to features, sending a warning, enacting a temporary account suspension, and for more serious offenses, permanently suspending accounts from our services.

Qualifications & exceptions

  • The list is not exhaustive ('including, but not limited to').
  • Permanent suspension is stated for 'more serious offenses'; the action depends on the nature of the violation.

Not stated here

  • The policy does not say which offenses are 'more serious' or whether the steps are applied in sequence.

Use & Processing · Company practice

Strava may use automated detection to surface or block content

Strava may use automated detection to surface content for review or to block content.

Supporting quotations

We may use automated detection to surface content for review or to block content.

Qualifications & exceptions

  • The statement is permissive ('may'), covering both surfacing content for review and blocking content.

Not stated here

  • The policy does not describe what the automated detection looks at.

Account & Service Control · Company practice

Strava notifies account owners and reporters by email

When Strava removes content, suspends an account, restricts access to features, or takes any other action against content or an account, it notifies the account owner using the email address on file. When someone reports a potential violation and Strava does not have enough information to act, it contacts them using the email address on file. These notices give users an opportunity to appeal enforcement decisions or share more context for a re-review.

Supporting quotations

When we remove content, suspend an account, restrict access to features, or take any other action against a piece of content or an account, we notify the account owner using the email address on file. Similarly, when someone reports a potential violation to us and we do not have sufficient information to take action on the report, we contact them using the email address on file. These notices offer an opportunity for users to appeal enforcement decisions or share more context for a re-review.

Qualifications & exceptions

  • The notices cover any action against content or an account, not only account suspensions.
  • Reporters are contacted only where Strava lacks sufficient information to take action on the report.

Not stated here

  • The policy does not say how quickly notices are sent.

Cross-references

Account & Service Control · User right or choice

How to appeal and the six-month window

To appeal an enforcement decision, follow the steps in the email you received. You can appeal up to six months after the date of the decision. When appealing, share the reason for the appeal, including any context or background that could help Strava understand the case. Strava says it will communicate its decision as a response to the appeals email.

Supporting quotations

If you’d like to appeal an enforcement decision, you can do so by following the steps outlined in the email you received. You can appeal up to six months after the date of the decision.
When submitting an appeal, share the reason for the appeal, including any context or background information that could help us understand the case better.
We will communicate our decision as a response to the appeals email.

Qualifications & exceptions

  • The appeal window is up to six months after the date of the decision.
  • Appeals follow the steps in the enforcement email, and the decision is sent in response to the appeals email.

Cross-references

Account & Service Control · Company practice

Appeals are reviewed by a human against Strava's policies

In all cases a human reviews appeals. Once an appeal is received, a human reviews the original decision against Strava's policies and guidelines to decide whether the determination of a violation and/or the enforcement action taken was warranted. Such decisions typically include granting the appeal, requesting more information or denying the appeal.

Supporting quotations

In all cases, a human reviews the appeals.
Once an appeal is received, a human will review the original decision against our policies and guidelines to determine whether the determination of a violation and/or the enforcement action taken were warranted. Such decisions typically include granting the appeal, requesting more information, or denying the appeal.

Qualifications & exceptions

  • The human review covers whether the determination of a violation and/or the enforcement action taken was warranted.
  • The listed outcomes are what such decisions 'typically' include.

Not stated here

  • The 'policies and guidelines' used for the appeal review are not all supplied in this document.