Skip to content
Shakeride

Data protection

Privacy policy

How Shakeride handles account information, telemetry logs, event data retention, and your rights under the General Data Protection Regulation (GDPR).

Last updated: September 18, 2026. Data controller: Altitude.

Data controller and contact

The data controller responsible for the processing of personal data on Shakeride is Altitude. If you have any questions regarding this policy, data processing, or to exercise your statutory privacy rights, email our data privacy desk directly at contact@shakeride.com.

Information collected and purposes

We process the following categories of data:

  • Account data: Name, work email, organization, and authentication tokens needed to grant secure access to the platform.
  • Ride and telemetry data: CloudTrail audit logs, API mutations, timestamps, and objective evaluation results generated during timed challenge sessions.
  • Billing records: Transaction history, VAT identifiers, and payment metadata. Payment card processing is managed by PCI-DSS certified processors; no card numbers touch our servers.

Scheduled purge of past event data

We apply strict data minimization and scheduled lifecycle purges for all cloud environments and event telemetry:

Automated retention and purge schedule

  • Ephemeral cloud sandboxes: Destroyed and wiped immediately upon ride termination or timeout expiration.
  • Raw CloudTrail telemetry: Retained for 30 days following an event to allow players and managers to review their debrief, after which raw API payloads are automatically purged.
  • Historical capability scores: Retained as anonymized or pseudonymized benchmark statistics to chart longitudinal engineering readiness trends.

Right to erasure and data subject rights

Under the GDPR (Articles 15 through 22), you hold the following rights:

  • Right of access to your personal information.
  • Right to rectification of inaccurate records.
  • Right to erasure ("Right to be forgotten"): You may request the permanent deletion of your account, ride debriefs, and associated personal records at any time.
  • Right to restriction of processing and data portability.

To request erasure or exercise any privacy right, write to contact@shakeride.com. All requests are confirmed and fulfilled within 30 days free of charge.

Data Processing Agreement (DPA) for teams and B2B

For corporate customers, training providers, and enterprise cohorts who process team member information on Shakeride, a comprehensive Data Processing Agreement (DPA) is available in accordance with Article 28 of the GDPR.

Review our standard Data Processing Agreement terms or email contact@shakeride.com to obtain a countersigned copy for your procurement file.

Cookies and tracking

We do not use tracking pixels, cross-site advertising networks, or behavioral ad cookies. We only use strictly necessary cookies to maintain secure sessions, verify authentication tokens, and preserve your light or dark theme choice.

Supervisory authority

In Switzerland, where Altitude is established, the relevant supervisory authority is the Federal Data Protection and Information Commissioner (FDPIC / PFPDT). Users residing in the European Union or United Kingdom also hold the statutory right to lodge a complaint with their national data protection authority.