---
title: "Privacy & data | HybridComps"
canonical: https://hybridcomps.com/privacy
format: text/markdown
---

# Privacy and data.

How information is used in the directory and gym accounts.

## Business listings

Displayed business details are checked against business websites, selected venue images and clearly labelled secondary sources. Identity-only discovery listings are marked research pending and have no training score. Race dates link to organiser calendars. Source links accompany researched services. Business phone numbers, email addresses and contact-page links are published only when the business presents them on its own website. General business contacts are labelled separately from venue contacts. Request a correction or removal at hello@hybridcomps.com. We do not publish Google ratings, reviews, photographs or owner profile information.

## Submissions

Gym accounts use Neon Managed Better Auth, connected through Vercel, to send a one-time email code and maintain your sign-in session. We store your account email and, when you claim a gym, your role, public evidence URL, message, listing reference and claim status in hosted PostgreSQL. These details are private and used to verify ownership and handle your request. They are not public gym content. A confirmed email does not establish ownership; claims require review. Verified owners may propose sourced listing corrections. We store proposed values, public sources, private notes and review history. Only approved listing details, source URLs and check dates become public; account details and reviewer notes remain private. Training scores are reviewed separately. Event submissions remain closed. We do not publish race participant records or private research captures.

## Saved gyms

Saved gyms stay in this browser’s local storage. The application uses an HttpOnly session cookie for forms, which expires after eight hours. Gym login uses a separate HttpOnly cookie for up to one hour; signing out clears it and requests revocation of the provider session. Account forms have request limits; transient session and rate-limit records expire automatically.

## Analytics preferences

Google Analytics loads on public pages for basic cookieless visit statistics. Analytics cookies stay disabled unless you select Allow cookies in Analytics settings in the footer. Choose Off to stop site measurement, or Cookieless to return to basic statistics. Earlier saved opt-outs are respected. Your selected preference is remembered in this browser for up to six months. No popup interrupts browsing. Google receives technical connection data and can receive cookieless measurement and consent signals; cookieless does not mean no data is sent. Pages with free-text search or sensitive URL parameters are excluded from measurement, including when cookies are allowed. Other page views omit URL query strings. Advertising storage, advertising user data, Google signals and ad personalisation remain disabled in every setting. Account and private dashboard pages do not load the Google tag.

## Social sharing

Sharing buttons open the service you choose or your device’s sharing menu. No embedded social tracking widgets load with the page. Copy link uses your clipboard when available. Opening an external sharing service shares the page link and your connection information with that provider.

## Your location and photographs

Use my location asks your browser for permission. Coordinates are compared with researched town centres in your browser and are not sent to our server or stored by the app. Your chosen town and country are saved in this browser to reuse on gym and race pages. Clear saved location removes that preference. Calendar location filtering uses the country and, when sourced city centres can be matched, an adjustable straight-line distance from the saved town centre. This is not driving distance or your exact position. Events without matched city coordinates are excluded by the distance filter and remain available under Whole selected country. Venue photos load from the businesses’ website image providers, which receive connection information including your IP address. Photo credits link to their source pages. Generic editorial imagery is not venue evidence.

## Contact and data requests

HybridComps operates this directory. For listing corrections, gym account questions, ownership disputes or access/deletion requests, email hello@hybridcomps.com. Account and claim data is retained while needed to process your request or manage verified ownership. You can request deletion using that address.

## Maps and hosting

Pages with an interactive map load tiles from OpenStreetMap, sharing your IP address with that provider. Vercel hosts this site and processes connection information needed to serve it. Neon provides the hosted PostgreSQL database in London and the managed authentication service. Account emails are passed to the authentication email provider to deliver sign-in codes.

Source: https://hybridcomps.com/privacy