Príobháideachas

No adverts and no tracking. You don't need an account to use Truvel, and we don't sell or share your data.

Who we are

Truvel (truvel.co.uk) is based in Edinburgh. We decide how the information described here is used.

Your searches

When you search, the places and times you enter are sent to our server. It asks TransCAPI, our own transport data service, for the answer. We use them only to answer that search.

To make repeat searches faster, answers are kept in our server's memory for a few minutes and then discarded. We don't build a history of your searches or link them to you.

Visitor counts

To see how Truvel is used, our server keeps daily totals: how many people visited, which pages they viewed, which sites linked to us, and, for journey searches, the rough areas searched between, the distance, the time of day and the options chosen. Places are rounded to an area about 11 km across before they're counted.

To count each visitor once a day, our server works out a code from your IP address and browser, mixed with a random value that changes every day. The code and the random value are kept in memory only and never stored, so the totals can't be linked to you or to each other. Truvel doesn't use cookies or anything on your device for this, and no one else sees the totals.

Accounts and alerts

You only need an account for alerts, and to keep your saved places on all your devices. If you make one, we keep:

• your email address, to sign you in and to send links to confirm your address or reset your password;
• your password, stored only as a scrypt hash, which can't be turned back into the password;
• your alerts: the stop or station, line and time of each bus or train you asked about. We delete them 30 days after it has gone;
• regular journeys you save (the days, times, stops and lines) and disruption alerts you set, until you remove them;
• your saved places (Home, Work and any favourites, with the names you give them), until you change or remove them;
• journeys you share: the trains and buses and when they're due, so the link can show your arrival time. Anyone with the link can see that, without your name or email address, until two hours after the journey was due to end;
• where to send alerts: for each device where you turn notifications on, the address and keys your browser gives us for its push service; and, if you connect Telegram, your Telegram chat number.

We use these only to run your account and send the alerts you ask for. To slow down password guessing, we also keep wrong sign-in attempts for 15 minutes. We don't send marketing emails. You can delete your account at any time from the Alerts page, which removes all of this straight away.

Your location

Truvel only asks for your location when you tap "Use my location" or "Show what's near me", and your browser asks your permission first. We never ask on page load. Your location is sent with your search like any other place, and isn't stored.

After you tap "Show what's near me", the home page shows what's near you on later visits too, but only while your browser allows Truvel to see your location without asking. Choose "Stop showing this" to turn it off. When you tap Home or Work with From empty, Truvel starts from your location in the same way, only if your browser already allows it. The Disruptions page starts from your location in the same way.

Cookies and storage

Truvel sets one cookie, and only if you sign in: truvel_session, which keeps you signed in for up to 180 days or until you sign out. It's needed for your account to work, so there's no cookie banner.

Truvel keeps a few things in your browser's storage: your saved places, and whether to show what's near you. They stay on your device, except that your saved places are also saved to your account when you're signed in.

If you turn on notifications, your browser keeps a small script from Truvel (a service worker) that shows them. It stores nothing about you.

Server logs

Like most websites, our web server keeps access logs. They include your IP address and the address of each page you request, which can include places you searched for. We use them only to keep Truvel secure, stop abuse and fix faults, and they are deleted after 14 days.

To stop any one person overloading the service, our server counts recent requests from each IP address. Those counts are kept in memory for a few minutes only.

Other services

• Cloudflare delivers truvel.co.uk and protects it from attacks. It handles your IP address and requests to do that.
• OpenFreeMap supplies map images. When you look at a map, your browser fetches them from OpenFreeMap, which sees your IP address and the area you're looking at.
• Brevo sends our sign-in emails, so it handles your email address.
• Your browser's push service (from Google, Apple, Mozilla or Microsoft, depending on your browser) delivers notifications if you turn them on. Their content is encrypted so the push service can't read it.
• Telegram delivers alerts if you connect it, and sees their content.

We use no other third parties: no outside analytics or advertising.

Your rights

You have rights under UK data protection law, including to ask what we hold about you and to ask us to delete it. We don't keep your searches. If you have an account, you can delete it yourself from the Alerts page.

To ask about your data, email [email protected].

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office.

Last updated 19 October 2026.