Privacy
Last updated
In short
- Public pages set no cookies and run no analytics or ads.
- There are no accounts. Only our staff admin area uses a sign-in cookie.
What reaches us
- Page requests. Like any website, our servers receive your IP address and the address of the page you ask for. We use the IP address to stop abuse (rate limiting). Server logs can record these details while we run and secure the service.
- “Use my location”. Only when you press it, your browser asks for your permission. Your coordinates, rounded to about 11 metres, are sent to our server to find the nearest stop. We do not save them, but like any request they can appear in server logs.
- Your search. The places and routes you search for are sent to our server to find matches, in the same way.
What stays in your browser
- Light or dark theme. If you pick one, the choice is kept in your browser’s local storage and is never sent to us.
Maps
When you press “Show map”, your browser loads map images from the tile provider named under the map. That provider receives your IP address.
Feedback
The “Feedback / report a problem” form at /feedback/ stores what you type and a little context:
- Your message and the category you choose.
- An email address, only if you give one. We use it only to reply to you.
- The page you came from (its address on this site) and the route or stop it was about.
- Your browser’s name and version (the User-Agent header, cut to 200 characters), to tell phone and desktop problems apart.
- A hashed network address. We keep a one-way hash of your IP address, not the address itself, so we can spot and stop spam.
Once we have handled a report, we delete it when it is 180 days old. Unhandled reports are kept until we handle them. Reports are never published as they are. The form sets no cookies.