Privacy
Privacy notice
This notice separates what BustimeFinder uses today from optional analytics, advertising and affiliate technology that is not currently enabled. Publishing this page does not activate any new tracker.
Last updated: 28 August 2026 · Legal content is currently provided in English.
Current status
BustimeFinder currently uses one functional language-preference cookie and Cloudflare Web Analytics. Microsoft Clarity, Google Analytics, Google AdSense, Awin affiliate measurement and other third-party advertising networks are not enabled.
Who is responsible
BustimeFinder is an independent transit-information website. The person or organisation operating BustimeFinder is the data controller for processing it decides to carry out.
A dedicated public privacy contact and the controller's full legal identity are not yet published. Those details must be added before BustimeFinder enables optional analytics, advertising, affiliate measurement, accounts or contact forms. Until then, those optional services remain disabled.
Information used today
| Information | Purpose | Basis and handling |
|---|---|---|
| Ordinary request and security data | Deliver pages, prevent abuse, diagnose failures and protect the service. | Processed through Cloudflare's network for legitimate service, reliability and security interests. This can include IP address, request time, requested path, headers and security signals. |
| Search queries | Return the route, place, stop or vehicle results requested by the visitor. | The words or route number entered are sent as the q parameter in the requested URL. They may therefore appear in ordinary infrastructure request logs, but BustimeFinder does not use them to build an advertising profile. |
| Language preference | Remember the language chosen by the visitor. | A first-party btf_locale cookie stores only a validated locale code for up to one year. It is not an advertising identifier and can be removed from the language menu. |
| Performance analytics | Understand page performance and aggregate usage. | Cloudflare Web Analytics uses a performance beacon. Cloudflare states that it does not use cookies or local storage for these metrics and does not track individual visitors across sites. |
BustimeFinder currently has no passenger accounts, booking checkout or contact form and does not ask visitors to submit names, email addresses, payment details or precise device location.
The service is a general public-transport directory rather than a service directed at children. It does not knowingly ask children for personal details. Any future advertising or audience-measurement feature will require a separate children-and-audience assessment before it is enabled.
Maps and outbound websites
Interactive maps load a public vector-map style from OpenFreeMap/OpenMapTiles using OpenStreetMap data. Loading maps sends the ordinary network information needed to serve those resources to the map provider. External links, such as an operator website or a photo-search link, are governed by the destination's own privacy notice once opened.
See the data-source directory for the public transport and mapping sources used by the service.
Optional services that remain disabled
BustimeFinder may consider the following services later. They will not be switched on merely because they are described here.
- Microsoft Clarity: interaction analytics and session-replay features. It will require an appropriate consent signal before its analytics or advertising storage is granted.
- Google Analytics: audience and usage measurement. It will require clear disclosure, consent where required and configured data-retention controls.
- Google AdSense or another ad network: ad delivery, fraud prevention, measurement and possible personalisation. No ad tag will be added until the selected vendors are identified and a suitable consent-management platform is working.
- Awin affiliate measurement: attribution of a deliberate click or eligible sale to BustimeFinder. Any future affiliate link will be labelled as advertising before the click; measurement will remain off unless the required consent has been obtained.
Before any of these services is enabled, this notice and the cookie notice will be updated with the actual provider, purpose, information, legal basis, retention, international-transfer safeguards and withdrawal controls.
Sharing, transfers and retention
Current technical information is shared only with infrastructure and mapping providers to operate the site. Cloudflare operates a global network, so technical request data may be processed outside the visitor's country under the safeguards described in Cloudflare's privacy documentation.
The language cookie lasts no longer than one year unless removed earlier. Infrastructure, security and aggregate performance information is retained according to the configured provider and account controls and only for as long as needed for service operation, security and troubleshooting. BustimeFinder does not maintain an individual advertising profile.
The exact fields and retention period of Cloudflare Worker invocation logs still need to be confirmed and stated here. Optional trackers, advertising and affiliate measurement will remain disabled until the controller identity, privacy contact, applicable retention periods and related legal details are complete.
Your choices and rights
You can forget the saved language from the language menu, clear site data in your browser, block cookies, or stop loading the site. If optional services are introduced, refusing them will not block core timetable, map or directory functions and a persistent privacy-settings control will allow withdrawal.
Depending on the law that applies, people may have rights of access, correction, deletion, restriction, objection, portability and withdrawal of consent. UK visitors can also complain to the Information Commissioner's Office. A direct controller contact channel still needs to be published before optional processing is launched.
Changes to this notice
This page will be reviewed before a new analytics, advertising, affiliate, account or communication feature begins. Material changes will be dated here and, where required, presented before information is collected or consent is requested.