Legal

Privacy Policy

Last Updated: August 2026

INTRODUCTION

This Privacy Policy explains how information is handled when you use TransitLens.

DATA COLLECTION

GTFS files uploaded or imported by users are processed entirely within the browser using a Web Worker. They are never transmitted to any server controlled by the author.

The application stores UI preferences (theme, layout, panel positions) in your browser's localStorage. This data stays on your device and contains no personal information.

FEEDBACK

When you voluntarily submit feedback through the in-app form, the following information is collected:

  • Your message text
  • Email address (only if you choose to provide one)
  • Browser information (user agent string, page URL)
  • Diagnostic data such as console logs (only if you opt in)
  • Screenshot attachments (only if you choose to attach them)

This data is stored on Cloudflare R2 infrastructure and used solely to review and respond to your feedback. Feedback notifications are delivered via the Resend email service.

No feedback data is collected automatically — it is only sent when you explicitly submit the feedback form.

GTFS PROXY

When importing a GTFS feed from a URL, the application may route the download through a proxy server to handle CORS restrictions. The proxy streams the feed data directly to your browser without logging, storing, or inspecting any request data. No IP addresses, URLs, or feed content are retained by the proxy.

ANALYTICS

This site uses third-party analytics to understand how it is used and to find problems. They do not run on localhost or private-network addresses.

PostHog records page views, when you leave a page, and two clicks: following a link to the app, and following a contact link. Automatic capture of every click and form field is switched off. PostHog also records replays of your session. Its identifier is stored in a cookie and in your browser's local storage, and the data is sent to PostHog's United States region.

Microsoft Clarity records your session (mouse movement, clicks, scrolling and the page as it was drawn on your screen) so that it can be played back, and aggregates those sessions into heatmaps. Anything typed into a form field is masked and never reaches Clarity. Clarity keeps replay data for 30 days, and click and heatmap data for 13 months. It is operated by Microsoft under its own privacy policy.

Cloudflare Web Analytics counts page views, referrers, country and browser, in aggregate. It is added by the hosting platform, sets no cookies, and does not build a profile of individual visitors.

Each provider processes this data on its own infrastructure, under its own privacy policy. That processing takes place outside the European Economic Area, including in the United States. None of it is sold, and none of it is used for advertising.

Turning analytics off. Setting the browser-storage key "disable_analytics" to "true" stops PostHog and Clarity on this site: nothing is loaded and nothing is sent. In your browser's developer console run localStorage.setItem('disable_analytics', 'true') and reload the page. To turn them back on, run localStorage.removeItem('disable_analytics') and reload. Cloudflare's page counter is added by the hosting platform and continues either way; it is cookieless. This choice is stored per browser and per device, and clearing site data resets it.

The TransitLens app at app.transit-lens.com asks before it loads any analytics, and has a Product analytics switch in its settings. This site does not ask yet.

COOKIES

This site sets no advertising cookies and takes part in no advertising networks.

Microsoft Clarity sets two first-party cookies, "_clck" and "_clsk", so that it can recognise your browser across pages and group activity into a session for replay. Uploading a recording also contacts Microsoft's own clarity.ms domain, which Microsoft may use to set an identifier under its own privacy policy.

PostHog sets one first-party cookie, holding the identifier it uses to recognise your browser.

Cloudflare Web Analytics is cookieless.

The analytics opt-out described above prevents the Clarity and PostHog cookies from being set at all, and clearing your site data removes any already stored.

THIRD-PARTY SERVICES

The application loads third-party libraries from unpkg.com and fonts from Google Fonts (fonts.googleapis.com / fonts.gstatic.com). These third-party services may collect standard request data (such as IP addresses) according to their own privacy policies.

LOG DATA

The hosted application infrastructure (GitHub Pages) may collect standard server logs such as IP addresses for operational and security purposes. The author does not access or process this data directly.

DATA SECURITY

Feedback data is stored securely on Cloudflare infrastructure. GTFS data and UI preferences remain on your device and are not transmitted to or retained by the author.

CHANGES

This Privacy Policy may be updated from time to time. Continued use of the Software constitutes acceptance of the updated policy.

CONTACT

For privacy-related inquiries: [email protected]