Privacy Policy

Montagneur — www.montagneur.com and tracker.montagneur.com Last updated: 26/09/2026

Montagneur is an independent, non-commercial project about mountain endurance sports. It has two parts, and they treat your data very differently:

• The knowledge base (www.montagneur.com) — open articles about training, gear, skills and mindset for mountain sports. No account, no tracking.
• The Workout Tracker (tracker.montagneur.com) — an invitation-based training platform where athletes build a season plan and follow it with their own training and health data.

This page explains what we collect, why, and what we will never do with it.

1. Who we are

Montagneur is published by Romain Mouton, an individual based in France (the "publisher" and, in GDPR terms, the data controller for the services described here). Contact: contact@montagneur.com.

2. The knowledge base (www.montagneur.com)

You can read everything without an account. We do not use advertising, ad trackers, or third-party analytics, and we do not sell anything on the site. Like any web server, our infrastructure keeps short-lived technical logs (IP address, requested page, timestamp) for security and abuse prevention; they are not used for profiling and are deleted on rotation.

3. The Workout Tracker (tracker.montagneur.com)

The Tracker is invitation-based and intended for a small community of athletes. Creating an account and connecting any data source is always your choice.

3.1 Account data

• Email address (used as your login and, if needed, to contact you about your account — never for marketing).
• Password, stored only as a salted scrypt hash. We cannot read it.
• Session cookie (wt_session, essential, HttpOnly) and a CSRF token.
• Security logs: failed login attempts are counted per email and IP address to block brute-force attacks.

3.2 Training and health data

This is the heart of the service, and it is sensitive data. Depending on what you import or connect, the Tracker stores:

• Workouts: GPS traces, heart rate, power, cadence, pace, elevation, calories, core body temperature (if you use such a sensor), and metrics derived from them (training load, zones, climb statistics…).
• Daily health metrics: heart-rate variability (HRV), resting heart rate, sleep duration/phases/score, body weight, and similar recovery metrics.
• Your plan: target races, weekly availability, training zones and thresholds, and the generated season plan.
• Gym sessions: the sets you tick on the gym sessions of your plan, with the reps and the kilos you type.

The uploaded files themselves (FIT, TCX or GPX, and the archives that contain them) are kept for as long as your account exists, so that any analysis added later can be computed on your whole history. Deleting your account deletes them.

3.3 Data sources — always connected by you, always read-only

The Tracker never reaches into any service you have not explicitly connected, and it only ever reads; it never writes to or posts on a connected service.

• Manual upload — files you drag and drop yourself: FIT, TCX or GPX, or an archive exported from Strava, Garmin or TrainingPeaks. If an archive is too large for the upload box, you can ask us to import it for you; we handle that archive for the import only.
• intervals.icu — if you paste your personal intervals.icu API key, new activity files (FIT, TCX or GPX) are fetched automatically, whatever the watch brand you connected there. Remove the key to stop.
• Garmin — when you connect your Garmin account (via Garmin's own consent screen), activity files recorded by your device are delivered to your Tracker account. See section 6.
• Oura — if you paste a personal Oura token, your nightly HRV, resting heart rate and sleep data are synced. Remove the token to stop.
• Withings — if you link your Withings account (OAuth), your weigh-ins are synced. You can disconnect at any time in Settings.

Disconnecting a source stops all future collection from it. Data already imported stays in your account until you delete it or delete your account.

3.4 Weather

To annotate outdoor workouts, the Tracker asks the Open-Meteo weather service for the historical weather at the approximate midpoint of your route. Only rounded coordinates and a time are sent — no name, account or identifier of any kind. Weather annotation is skipped for workouts without GPS.

3.5 Maps

When you open the map of a workout, your browser loads the map background from the OpenStreetMap tile servers (tile.openstreetmap.org, run by the OpenStreetMap Foundation in the United Kingdom, a country recognised by the European Commission as providing an adequate level of data protection). Like any website, those servers see your IP address and the map area requested. Your route, your name and your account are never sent to them.

3.6 A coach analysing someone else's file

A coach can analyse a single workout file of a person who has no account, for example an athlete they are about to coach. The file is processed on our server to draw the charts, kept in memory for one hour at most, and never stored. The coach who uploads it must have that person's agreement.

4. What we do with your data — and what we never do

Your data is used for exactly one thing: showing your own training back to you and adapting your own plan (load management, recovery-based adjustments, race preparation).

We never:

• sell, rent, or trade your data;
• show your data to any other user of the platform, unless you have explicitly asked us to — see section 4b on coaches;
• use your data for advertising or marketing;
• use your data to train AI or machine-learning models, ours or anyone else's — all analysis is computed by our own deterministic, rule-based code on our own server;
• transfer your data outside the hosting and services described on this page;
• open your files with an AI assistant. Development tools of that kind only ever work on the publisher's own training data, or on yours if you have explicitly asked for it.

Administration. The publisher runs the server and can therefore technically access the data stored on it. He does so only to keep the service working (fixing a fault, restoring a backup) or to do what you asked (importing a large archive, resetting your password), and never to look at your training otherwise.

4b. Sharing your training with a coach

By default nobody but you sees your data. You may choose to give a coach — another account on the platform — access to yours. If you do:

• You start it, and only you. You pick the coach in the Training Plan panel, at the top of the Training sessions tab. The coach then has to accept; until they do, they see nothing.
• You choose what is shared, category by category. Training data (your planned and completed sessions, your plan, your segments) and recovery data (HRV, resting heart rate, sleep, body weight) are two separate permissions. Recovery data is never shared unless you tick it yourself, because it deserves a higher bar.
• A coach can write sessions into your calendar and leave notes on a day, and nothing else. They cannot change your settings, regenerate your plan, import files, connect or disconnect your devices, delete your data, or share it onward. Notes are a two-way thread: you can reply, and you can delete your own messages.
• You can see what they did. The same panel shows an access log: which day your coach looked at your plan, and every session they added, changed or removed.
• You can end it at any time, in one click, with no loss of data. Access stops immediately. If that coach was writing your plan, automatic plan generation resumes.
• Deleting your account removes every trace of these permissions, on both sides.

4c. Email

We send you email only when something you did requires it: welcoming you after sign-up, telling a coach you invited them, telling you a coach accepted, and sending a password reset link when you ask for one. No newsletters, no marketing, no tracking pixels.

These messages are delivered by Proton, a Swiss provider. Switzerland is recognised by the European Commission as providing an adequate level of data protection, so sending them there requires no further safeguards on your part. Proton receives your email address and the content of the message — nothing else about your training. A copy stays in the sending mailbox, stored with zero-access encryption.

5. Where your data lives, and how it is protected

The Tracker runs on a server hosted by Hetzner in the European Union. All traffic is encrypted in transit (HTTPS). Each athlete's data is stored in a strictly separate per-user space, and every request is checked against your session before any data is read or written — including requests from a coach you have authorised, whose permission is re-checked every single time. Backups are made every night: one copy on the server itself, kept 14 days, and one encrypted copy on a separate Hetzner storage space in the European Union, kept 7 weeks. Older backups are deleted.

6. Garmin data

If and when you connect your Garmin account:

• Collection happens only after your explicit consent on Garmin's own authorization page.
• We receive the activity files your device records (the same FIT files you could export yourself), and we use them solely as described in section 4 — displayed only to you, never to other users, never for AI/ML, never for advertising, never sold.
• You can revoke access at any time, either in the Tracker's Settings or from your Garmin Connect account settings. Revocation immediately stops any new data from being received.
• Activities already imported remain in your account (they are part of your training history) until you delete them or your account; deleting your account deletes them.

7. Retention and deletion

• Your data is kept for as long as your account exists.
• You can delete your account yourself at any time (Account page). Deletion removes your account and all associated data — plan, workouts, health metrics, connected-service tokens.
• Deleted data disappears from backups within 7 weeks.
• Accounts can also be deleted on request to contact@montagneur.com.

8. Legal bases (GDPR)

• Performance of the service (art. 6(1)(b)) for account data and the features you use.
• Your explicit consent (art. 9(2)(a)) for health-related data — given when you create an account, upload files, or connect a source, and withdrawable at any time by disconnecting the source or deleting your data.
• Legitimate interest (art. 6(1)(f)) for security logs and abuse prevention.

9. Your rights

Under the GDPR you can ask for access to, rectification, erasure, or portability of your data, restrict or object to processing, and withdraw consent at any time — most of it self-service in the app, everything else via contact@montagneur.com. You can also lodge a complaint with your supervisory authority (in France, the CNIL — www.cnil.fr).

10. Minors

Neither the knowledge base's interactive features nor the Tracker are directed at children. The Tracker is not intended for users under 15.

11. Cookies

The Tracker only uses cookies needed for what you ask it to do: wt_session keeps you logged in, wt_lang remembers the language you chose, and, for a coach, wt_acting and wt_mode remember which athlete and which view are open. Your browser also keeps three display preferences in its local storage: the last tab opened, whether the Training Plan panel is open, and how many seasons the Performance tab shows. None of them is used to track you, and there are no advertising or third-party cookies anywhere on montagneur.com.

12. Changes to this policy

If this policy changes in a way that matters (new data, new purpose, new processor), we will say so on this page and, for Tracker users, in the app.

Résumé en français

Montagneur.com est une ressource de partage sur les sports d'endurance en montagne : la partie éditoriale se lit sans compte et sans traceur. Le Workout Tracker (tracker.montagneur.com), sur invitation, stocke tes données d'entraînement et de santé (séances, FC, HRV, sommeil, poids) dans le seul but de te les afficher à toi et d'adapter ton plan. Les sources (fichiers déposés à la main, intervals.icu, Garmin, Oura, Withings) ne sont connectées que par toi, en lecture seule, et sont déconnectables à tout moment. Jamais de publicité, jamais de vente de données, jamais d'entraînement d'IA. Aucun autre utilisateur ne voit tes données — sauf un coach que tu as toi-même choisi : tu décides ce que tu lui partages (les données de récupération, HRV/sommeil/FC de repos, ne le sont que si tu coches explicitement), il ne peut qu'écrire des séances dans ton calendrier et te laisser des notes auxquelles tu réponds, tu vois ce qu'il a consulté et modifié, et tu peux mettre fin à son accès en un clic. Les seuls emails envoyés sont ceux que tes actions déclenchent (inscription, invitation d'un coach, mot de passe oublié), via Proton, en Suisse (pays reconnu adéquat par la Commission européenne). Hébergement en Union européenne (Hetzner), HTTPS, données isolées par compte. Les fonds de carte viennent des serveurs d'OpenStreetMap, qui voient ton adresse IP et la zone affichée, jamais ta trace. L'administrateur du serveur n'accède à tes données que pour le faire fonctionner ou pour ce que tu lui demandes, et aucun fichier d'un utilisateur n'est ouvert avec un assistant IA sans sa demande. Tu peux supprimer ton compte et toutes tes données toi-même, à tout moment (les sauvegardes sont purgées sous 7 semaines). Droits RGPD et questions : contact@montagneur.com — réclamation possible auprès de la CNIL.