Last updated: August 2026
Very little. StopBoard is designed to work without collecting personal data.
If you tap "Nearby Stops", your browser shares your coordinates with this app to find bus stops near you. The app may also request your location automatically the first time you visit, or when you return with a saved stop, so it can suggest a nearby stop without you having to search.
Your coordinates are sent only to StopBoard's own servers — never a third party — to find nearby stops, and are also kept in your browser's local storage so a repeat lookup within a few minutes doesn't need a new GPS fix. This stored location automatically expires and is deleted after 5 minutes, whether the app is reloaded or left open in the background.
Legal basis: consent (Article 6(1)(a) GDPR); location is only requested with your browser's permission, which you can deny or revoke at any time in your browser or device settings.
You can use the search bar instead — location is entirely optional. If a location is already available, search results are ordered by proximity, but searching itself never requests a new location fix.
To prevent abuse, we limit API requests per visitor. Your IP address is hashed (one-way, irreversible) and stored in Redis with a 1-minute expiry to count requests, with a brief in-memory fallback only if Redis is temporarily unreachable. The raw IP is never stored.
Legal basis: legitimate interest (Article 6(1)(f) GDPR): protecting the service from overload and abuse.
We use no cookies, no advertising, and no third-party trackers. We do not use Google Analytics, Facebook Pixel, or any similar service. We use Umami, a privacy-friendly, cookieless analytics tool hosted on our own server to count page views. No personal data is collected, no cookies are set, and all analytics data stays on our infrastructure.
We do use your browser's local storage (not cookies) to remember things like your saved stops, recently viewed stops, theme preference, and visit count. This stays on your device, is never sent to our servers or anyone else, and you can clear it any time via your browser's site settings.
All styles, fonts, and mapping libraries are self-hosted. No external CSS frameworks or CDN resources are loaded.
Real-time and schedule data comes from the Bus Open Data Service (BODS), published under the Open Government Licence v3.0, © Crown copyright.
All analysis (dwell times, travel times, predictions) is derived from this public data. No passenger or personal information is used.
The Support StopBoard link leads to Buy Me a Coffee, a third-party payment service with its own privacy policy.
Under GDPR you have the right to access, correct, or delete any personal data we hold about you. Since we don't store personal data, there is typically nothing to retrieve, but you're welcome to ask.
Questions about privacy? Email hello@stopboard.uk.