Privacy Policy

Introduction

This Privacy Policy explains how The Engine Room (engineroomtraining.com) collects, uses, and protects information when you visit or interact with our site. By using this site you agree to the practices described here.

What data we collect

• Analytics data via Google Analytics 4: pages visited, time on site, device type, browser, approximate location (city level), and behavioral data such as clicks and scroll depth. This data is aggregated and not linked to individuals.
• Email address if voluntarily submitted via the Get Alerts signup or Contact form.
• Gym business information submitted via the Submit a Sim or Submit a Gym forms: gym name, address, phone, website, Instagram handle, and contact email. Contact email is used for our outreach only and is not displayed publicly.
• Location data if the user enables the Near Me toggle. This is processed at the browser level by Mapbox and is not stored by The Engine Room.
• Usage logs including IP address and referrer, retained briefly for security and spam prevention.

How we use it

• Analytics data is used to understand how visitors use the site and to improve content and navigation.
• Email addresses collected via Get Alerts are used solely to notify subscribers of new HYROX simulation events in their area. Subscribers can unsubscribe at any time.
• Gym business information submitted via forms is used to maintain and improve the directory. Contact emails are used for verification and outreach only.
• We do not sell, rent, or share personal data with third parties for marketing purposes.
• We do not use personal data for automated decision-making or profiling.

Cookies

• Analytics cookies set by Google Analytics 4 to measure traffic and usage patterns. These cookies do not identify you personally.
• Functional cookies set by Mapbox to enable the interactive map. These are only active when you use the map.

You can disable cookies in your browser settings at any time. Disabling analytics cookies will not affect your ability to use the site. Disabling functional cookies may affect map functionality.

Third party services

This site uses the following third party services that may process your data:

Each third party service is bound by its own privacy policy. The Engine Room is not responsible for the data practices of these services.

Data retention

• Analytics data is retained by Google Analytics per their default retention settings (14 months by default). We do not retain raw analytics data ourselves.
• Email addresses collected via alerts or contact forms are retained until the user unsubscribes or requests deletion.
• Gym submission data is retained for as long as the listing is active in the directory. Gym owners may request removal at any time.
• Usage logs including IP addresses are retained for no more than 30 days for security purposes.

User rights

You have the following rights regarding your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Deletion: You may request deletion of your personal data at any time.
• Correction: You may request correction of inaccurate data.
• Unsubscribe: Email alert subscribers can unsubscribe at any time via the unsubscribe link in any alert email or by contacting us directly.
• Opt out of analytics: You can disable Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

To exercise any of these rights, contact us at the email address listed in the Contact section below.

GDPR and UK GDPR

For visitors from the European Union or United Kingdom, the following applies:

• Lawful basis for processing: We rely on legitimate interests for analytics (understanding how our site is used) and consent for email communications (you explicitly opted in).
• Data controller: The Engine Room, operated by vidi consulting LLC, Fishers, Indiana, USA.
• International transfers: Data processed by our third party services (Google, Mapbox, Supabase) may be transferred outside the EU/UK. Each provider maintains appropriate safeguards under Standard Contractual Clauses or equivalent mechanisms.
• Right to lodge a complaint: EU residents may lodge a complaint with their local data protection authority. UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.

CCPA (California residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know: You may request disclosure of the personal information we collect, use, and share about you.
• Right to delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to opt out of sale: We do not sell personal information. No opt-out is required.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at the email address in the Contact section below. We will respond within 45 days.

Children

This site is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately and we will delete it promptly.

Contact

For privacy-related requests, questions, or concerns — including data access, deletion requests, or CCPA/GDPR inquiries — send us a message.

We aim to respond to all privacy requests within 30 days. This policy was last updated September 28, 2026 and may be updated periodically. Continued use of the site after updates constitutes acceptance of the revised policy.

Questions about your data?

Access, deletion or correction requests — reach out any time.