Privacy Policy - TransitTracker

Last updated: 2026-01-01

Updated: cookie consent

1. Who We Are

TransitTracker ("we", "us", "our") is the data controller responsible for the processing of your personal data under UK GDPR and EU GDPR.

Contact: [email protected]

2. Information We Collect

2.1 Information You Provide

Email address, username, and encrypted password
Account preferences and privacy settings
Journey, route, or timetable data you add, import, or modify
Communications sent to us (support requests or feedback)

2.2 Automatically Collected Information

IP address
Browser type and version
Device and operating system information
Usage and interaction data

2.3 Third-Party Data Sources

TransitTracker displays public transport and journey data sourced from third-party providers. This data is provided "as is" and may contain inaccuracies.

3. Legal Basis for Processing

We process personal data under the following lawful bases:

Contractual necessity – to provide core account features
Legitimate interests – service improvement, analytics, and security
Consent – where required (for optional features)
Legal obligation – where required by law

4. How We Use Your Information

Operate and maintain the TransitTracker service
Authenticate users and manage accounts
Store and display journey history
Apply visibility and sharing preferences
Improve performance, reliability, and security
Respond to support requests and service notices

5. Sharing Your Information

5.1 Shared Journeys

Journeys are private by default and only shared if you explicitly change your privacy settings.

5.2 Service Providers

We may share limited personal data with trusted hosting, analytics, and infrastructure providers who act only on our instructions.

5.3 Legal Disclosure

We may disclose information where required by law or necessary to protect our users, service, or legal rights.

6. International Data Transfers

Some service providers may process data outside the UK or EEA. Where this occurs, appropriate safeguards such as Standard Contractual Clauses are used.

7. Cookies

We use cookies to maintain login sessions, store preferences, and collect anonymised analytics. You can control cookies here.

8. Data Storage and Security

We use industry-standard technical and organisational measures to protect personal data. However, no system can guarantee absolute security.

9. Data Retention

Personal data is retained while your account remains active. When an account is deleted, data is removed or anonymised unless legally required otherwise.

10. Your Rights

Under GDPR, you have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Restrict or object to processing
Receive a copy of your data (portability)
Withdraw consent at any time

Requests can be made via [email protected]

11. Complaints

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you believe your data protection rights have been infringed.

12. Children's Privacy

TransitTracker is not intended for users under the age of 13 and does not knowingly collect children's data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be reflected by a revised "Last updated" date.