Last updated: May 2026
Very little. StopBoard is designed to work without collecting personal data.
If you tap "Use my location", your browser shares your coordinates with this app to find nearby bus stops. Your location is used once in that moment and is never stored, logged, or sent to any third party. Your coordinates are sent to our server to find the nearest stop, then immediately discarded. They are never stored, logged, or shared with any third party.
Legal basis: consent (Article 6(1)(a) GDPR) — location is only shared when you actively tap the location button.
You can use the search bar instead - location is entirely optional.
To prevent abuse, we limit API requests per visitor. Your IP address is hashed (one-way, irreversible) and held temporarily in memory to count requests. The raw IP is never stored. Hashed values expire automatically within minutes.
Legal basis: legitimate interest (Article 6(1)(f) GDPR) — protecting the service from overload and abuse.
We use no cookies, no advertising, and no third-party trackers. We do not use Google Analytics, Facebook Pixel, or any similar service. We use Umami, a privacy-friendly, cookieless analytics tool hosted on our own server to count page views. No personal data is collected, no cookies are set, and all analytics data stays on our infrastructure.
All styles, fonts, and mapping libraries are self-hosted. No external CSS frameworks or CDN resources are loaded.
Real-time and schedule data comes from the Bus Open Data Service (BODS), published under the Open Government Licence v3.0, © Crown copyright.
All analysis (dwell times, travel times, predictions) is derived from this public data. No passenger or personal information is used.
Under GDPR you have the right to access, correct, or delete any personal data we hold about you. Since we don't store personal data, there is typically nothing to retrieve — but you're welcome to ask.
Questions about privacy? Email info.ptanalytics@gmail.com.