Privacy

What we store

• The crowding state you reported, the service, and the time.
• Optional extras you chose to add: carriage area, barriers, a short note.
• A random identifier held in your browser, used only to prevent spam and duplicate reports. It is not linked to your name, email or device fingerprint.

Charging reports

Charging reports need no sign-in. They are privacy-preserving, not completely anonymous:

• A report contains only the site, the outcome you selected and the time it was submitted.
• No account, name, free text, IP address or device details are stored with a report.
• A random identifier kept in your browser is stored with each report, only to limit spam (for example, five reports per hour). It is never displayed publicly.

Location

Location is requested only when it can verify that you are near a service or station, and only after we explain why. We keep the outcome — near a calling station, onboard route match, manual selection or unverified — and not a location trail.

Accounts

An account is optional and only adds syncing, report history and route alerts. There are no public profiles, usernames, follower counts or leaderboards. You can export or delete your data at any time from My journeys.

Local data

Recent searches, locally saved routes and your own report history are kept in your browser. Clearing your browser data removes them, and there is a button in My journeys to clear them immediately.