Privacy policy

In short

• No adverts and no accounts. We do not sell your data.
• Your saved stops and settings stay on your device. You can delete them at any time.
• Your location is used only with your permission: when you tap a location button and — once you have allowed it — to show the stops near you on the home page.
• Statistics only with your consent. If you accept, Google Analytics stores two cookies in your browser and sends Google information about the pages you open and your device; if you reject, nothing is loaded from Google — see Google Analytics and cookies.
• Requests go to two services, three with your consent: transit.bg's own data server for transport data, geo.myburgas.com for address search and, if you accept, Google Analytics for visit statistics.

What is stored on your device

transit.bg keeps the following in your browser's storage (localStorage, IndexedDB and the service worker cache). None of it is sent to us:

• Saved stops and lines — so they appear under Saved.
• Recent searches — to suggest them again.
• Settings — theme, the last city you viewed, the last map position (never a view centred on your own location) and whether you allowed location access (a yes, never the location itself).
• Cached timetable data — stops, lines and timetables, so the app loads quickly. It is refreshed when the operators publish new data.
• The app itself and pages you have opened — so they work with a poor connection.
• Your cookie choice — whether you accepted or rejected Google Analytics, and when, so that we ask again only after 6 months.

If you accept Google Analytics, it also stores two cookies on your device, which are sent to Google; they are described under Google Analytics and cookies.

To clear cached timetable data and your recent searches, use Clear cached data on the More page — your saved stops and settings stay. To remove everything, delete the site data for transit.bg in your browser settings; uninstalling the installed app does not always remove it.

Which services receive requests

Your browser connects directly to these services. Like any web server, they see your IP address and basic browser information, and may keep standard server logs for security and operation:

• transit.bg's data server — timetables, live departures, vehicles, alerts and journey plans. It receives what is needed to answer: the stop or line you open, the centre of the map while you browse it (to list the stops there), and the coordinates of a trip you plan or of your location when you look for nearby stops.
• geo.myburgas.com — address and place search. It receives the text you type and a point near the area you are looking at, rounded to about 1 km, so that nearby results rank higher. If you have used your location in the app, that point comes from it, rounded the same way — never your exact position.
• transit.bg — the web server that delivers the pages, the app and the map tiles. The map is hosted here, so no map provider learns where you look.
• Google Analytics (Google), only if you accept — visit statistics: the pages you open, your device and a random identifier, as described under Google Analytics and cookies.

No other third parties are involved: apart from the Google Analytics script, which loads only with your consent, no fonts, scripts, maps or images are loaded from other servers, and there are no social media buttons.

Google Analytics and cookies

With your consent, transit.bg uses Google Analytics 4, a web analytics service provided in the European Economic Area by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It shows us how many people use the site, which pages they open, how they arrive and which devices they use, so that we can improve it.

On your first visit, a banner asks whether you accept Google Analytics. “Accept” and “Reject” are equally easy, and until you choose, nothing is loaded. If you reject or do not choose, your browser does not contact Google and no Google Analytics cookies are set. Through Google Consent Mode, Google’s script is told that you allowed statistics only — never advertising. Your choice is kept on your device for 6 months; then we ask again.

You can change your choice at any time under Cookie settings, at the bottom of every page and on the More page. If you withdraw your consent, the Google Analytics cookies are deleted and nothing more is sent.

Cookie settings

If you accept, your browser loads Google's script from www.googletagmanager.com on every page, and it sends Google Analytics information about your visit:

• The page — its address and title, the time, and the page you came from. The address can name the city, line or stop you look at, the map position, or the start and end of a journey you plan — never your own location (see Your location).
• Your device — device type, operating system, browser, language and screen size.
• What you do on the page that Google Analytics records automatically, such as scrolling to the end of a page or opening a link to another site.
• A random identifier from the cookies below, by which repeat visits from the same browser are recognised.
• Your IP address — Google uses it to estimate your approximate location (country, region and city) and, according to Google, does not log or store it in Google Analytics.

If you accept, Google Analytics stores these cookies in your browser for transit.bg:

• _ga — a random identifier that tells one browser from another. It expires 2 years after your last visit.
• _ga_9TTT0YMZXK — keeps the state of the current session: when it started and how many sessions there have been. It expires 2 years after your last visit.

transit.bg itself sets no cookies: what the app keeps on your device, including your cookie choice, is listed under What is stored on your device.

Google may process this data outside the European Union, including in the United States; Google LLC is certified under the EU–US Data Privacy Framework. How Google uses the data is explained in How Google uses information from sites that use its services and in Google's privacy policy.

Besides Cookie settings, a content blocker or Google's opt-out browser add-on also stops Google Analytics. transit.bg works the same without it.

Your location

transit.bg first asks for your location when you tap a location button (for example “My location” or nearby stops), and your browser always asks for your permission. Once you have allowed it, transit.bg uses it without another tap in three places: the home page shows the stops near you, a shared journey link that starts or ends at “my location” is planned from where you are, and the empty journey planner opens the map on your city. You can withdraw the permission at any time in your browser settings.

Your location is processed on your device to centre the map. Its exact coordinates leave the device only in a request to transit.bg's data server for nearby stops or a journey plan; the address search gets at most a point rounded to about 1 km. No link contains your position: a shared journey says “my location”, which means the position of whoever opens it, and the map's address is not updated while the map shows where you are. transit.bg does not store your location — the app only remembers that you allowed it.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to access, correct and erase your personal data, to restrict or object to its processing, and to data portability. You can withdraw your consent to Google Analytics at any time under Cookie settings; this does not affect the processing that took place before. transit.bg keeps no accounts: what the app remembers lives in your browser, under your control. Apart from that, personal data are involved only in the standard server logs and the Google Analytics statistics described above.

For any question or request, write to contact@transit.bg. You also have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (cpdp.bg).

Changes to this policy

If the way transit.bg handles data changes — for example when the mobile apps launch — we will update this page and the date below before the change takes effect.

Contact

Questions about privacy? Write to contact@transit.bg.