Strava fields in every export
Through the official API with athlete consent: activity identifier, type, start time, elapsed and moving time, distance, elevation gain, average and maximum speed, and the device where reported. Heart rate and power series are available where the athlete records them and the consent covers them, and they are treated as health data throughout.
From the public segment surfaces: segment identifier, name, sport type, distance, average and maximum grade, elevation, the geographic area it sits in, and the leaderboard entries the page publishes.
Athlete identity is handled deliberately rather than by default. For research and product analytics we deliver pseudonymised identifiers so activity can be linked across time without naming a person. Named athlete data is delivered only where the athlete consented to that specific use through the API scope, and we record which consent covers which rows.
Route geometry is a separate decision again. A GPS track is location data about an individual, frequently starting at their home, and we deliver it only under explicit consent and usually truncated at both ends by default.
Every row carries its source - API with consent, or public page - because six months later somebody will need to know which, and the answer has to be in the data rather than in somebody's memory.