Privacy

Privacy notice

This notice explains BustimeFinder's current services, optional Google Analytics and the advertising and affiliate technology that remains disabled.

Last updated: 10 October 2026

Current status

Google Analytics runs by default. You can reject it in Privacy settings.

Privacy contact

Privacy and data-protection enquiries can be sent to admin@bustimefinder.com. The operator has supplied India as its country but has not supplied a complete geographic postal or service address. BustimeFinder will publish that address if it is required for the operator's legal form, applicable market or an approved advertiser programme. It will not be inferred from private account or domain records.

Information used today

InformationPurposeBasis and handling
Ordinary request and security dataDeliver pages, prevent abuse, diagnose failures and protect the service.Processed through Cloudflare's network for legitimate service, reliability and security interests. This can include IP address, request time, requested path, headers and security signals.
Search queriesReturn the route, place, stop or vehicle results requested by the visitor.The words or route number entered are sent as the q parameter in the requested URL. They may therefore appear in short-retention infrastructure request logs, but BustimeFinder does not use them to build an advertising profile.
Language preferenceRemember the language chosen by the visitor.A first-party btf_locale cookie stores only a validated locale code for up to one year. It is not an advertising identifier and can be removed from the language menu.
Performance analyticsUnderstand page performance and aggregate usage.Cloudflare Web Analytics uses a performance beacon. Cloudflare states that it does not use cookies or local storage for these metrics and does not track individual visitors across sites.

Cloudflare states that its Web Analytics beacon does not use cookies or local storage, does not track individuals across sites and does not record URL query strings. Cloudflare documents seven days of unsampled beacon data before aggregation and up to six months of dashboard history. See Cloudflare's collection description and Web Analytics FAQ.

Google's data description

BustimeFinder currently has no passenger accounts, booking checkout or contact form and does not ask visitors to submit names, email addresses, payment details or precise device location.

The service is a general public-transport directory rather than a service directed at children. It does not knowingly ask children for personal details. Any future advertising or audience-measurement feature will require a separate children-and-audience assessment before it is enabled.

Maps and outbound websites

Interactive maps load a public vector-map style from OpenFreeMap/OpenMapTiles using OpenStreetMap data. Loading maps sends the ordinary network information needed to serve those resources to the map provider. External links, such as an operator website or a photo-search link, are governed by the destination's own privacy notice once opened.

See the data-source directory for the public transport and mapping sources used by the service.

Optional services that remain disabled

BustimeFinder may consider the following services later. They will not be switched on merely because they are described here.

  • Microsoft Clarity: interaction analytics and session-replay features. Before launch, BustimeFinder must either block Clarity until opt-in or accurately disclose any limited no-consent mode. Microsoft Consent API v2 must receive separate analytics_Storage and ad_Storage choices, including revocation, and the final notice must state the live cookies, masking, retention and transfers.
  • Google AdSense or another ad network: ad delivery, fraud prevention, measurement and possible personalisation. For UK, EEA and Swiss visitors, no Google ad request may be made without the required Purpose 1 consent. A Google-certified CMP implementing IAB TCF v2.3 must identify the selected ad-technology providers and offer equally accessible refusal and withdrawal. Personalised, non-personalised and limited-ad behavior must match the visitor's choice.
  • Awin affiliate measurement: attribution of a deliberate click or eligible sale to BustimeFinder. Each monetised link must be labelled as advertising before the click. Where consent is required, the click may use Awin measurement only after the current choice has been communicated through the Awin Consent Signal or supported IAB TCF signal; otherwise the site must use a clean non-tracking destination or show no commercial link.

Before any of these services is enabled, this notice and the cookie notice will be updated with the actual provider and controller/processor role, purpose, information, legal basis, cookies or storage, retention, recipients, international-transfer safeguards, children-and-audience assessment and withdrawal controls.

Sharing, transfers and retention

Google receives public page paths, titles and browser information, excluding search terms. Data may be processed abroad. User and event data is kept for 2 months.

The language cookie lasts no longer than one year unless removed earlier. Cloudflare Worker invocation logging is enabled at a 100% head-sampling rate. Invocation records contain request, response and related execution metadata; a fetch invocation can include the request method and URL, including a search term in the q query parameter. Cloudflare currently documents Workers Logs retention as three days on the Free plan and seven days on the Paid plan. BustimeFinder therefore states a maximum retention of seven days without requiring visitors to know which hosting plan is active.

Cloudflare Web Analytics retains unsampled beacon data for seven days before aggregation and makes dashboard history available for up to six months. Infrastructure and security data may be processed across Cloudflare's global network. BustimeFinder does not currently maintain an individual advertising profile.

Your choice remains until changed or browser storage is cleared.

Google's default is up to two years; browser limits may shorten it

The isolated BustimeFinder deployment manifest does not configure a separate Worker-log export destination. If an export or longer-lived logging system is introduced, this notice will be updated before it begins. Other optional trackers, advertising and affiliate measurement remain disabled until their provider-specific launch gates are complete.

Your choices and rights

Rejecting stops future analytics and removes accessible analytics cookies. Earlier data cannot be recalled.

You can reject or withdraw Google Analytics consent through privacy settings at any time. Refusal does not block timetables, maps or directories. You can also forget the language preference from the language menu, clear site data in your browser or block cookies.

Depending on the law that applies, people may have rights of access, correction, deletion, restriction, objection, portability and withdrawal of consent. Requests can be sent to the privacy contact above. UK visitors can also complain to the Information Commissioner's Office.

Changes to this notice

This page will be reviewed before a new analytics, advertising, affiliate, account or communication feature begins. Material changes will be dated here and, where required, presented before information is collected or consent is requested.