- Agindaasowin
- Privacy and data rights
Agaasaa eta ganawendamin gikendamowin. Gaawiin wiikaa ingadadaawaagesiimin.
Kawin ki-andawendansin account. Kawin wìkàd ki-wàbandaàsimin awiya izhinikàzowin. Ow mazinaigan ojibiàmon kakina kènawendamang, àndi, mìnawa àniyapi.
Gegoo ganawendamang, miinawaa aaniin apii
- not storedSearches
- your device onlyNagaawinan miinawaa bimibizowinan gaa-ganawendaman
- Reports and crowdingour database · up to 365 days
- Messages to usencrypted · 365 days after closing
- Visitscounted, no cookie · 400 days
- Visits, second countCloudflare · counts only
- DibaabandamowinOn. Pages viewed and basic engagement, by Google Analytics and PostHog, unless you switch it off. Never your trips, stops or searches.
- Scrambled network addressto stop abuse · 24 hours
- Map tilesthe map provider sees your request
| Apii giin | Gegoo ganawendamang | Aandi | Aaniin ezhi-ginwenzh |
|---|---|---|---|
| Nandawaabandan omaa | Gaawiin gegoo. Gaawiin ganawendanziimin ge-nandawaabandaman. Gaawiin gidinaajimosiimin aaniindi ayaayan. | Nowhere | Kawin gii-izhichigaadesinoon |
| Ganawendan ingoji, gemaa aandi wii-izhaayan | Mazinaigan. Omaa eta ayaamagad gimazinaatesijiganing. Gaawiin wiikaa niwaabandanziimin. | Gidaabajichigan | Biinish ji-gaasiibii'aman |
| Send a report | Dibaajimowin miinawaa giin eta gimazina'igan. Gaawiin gidizhinikaazowin, gaawiin gwayak ezhi-ayaayan ate. | Nimazina'iganinaanin | Biinish 365 giizhigadoon |
| Ozhibiamawishinàm | Ki-ikidowin, kìmòj ganawendàgwad. Ki-email eta ishpin nakwetàgoyan nandawendaman. | Nimazina'iganinaanin | 365 giizhigadoon ishkwaa gibaakwaa'igaadeg |
| Waabandan wegonen mazina'igan | Endaso-giizhik agindaasowin, mazina'igan ezhinaagwak, inwewin gaye aki. Gaawiin gegoo ningii-atoosiimin. Gaawiin gikendanziimin endaayan. | Ninawind ke-agindàsoyàng | 400 giizhigadoon |
| Izhaan awegwen mazina'igan, bakaan ezhi-agindaasong | Miinawaa bezhig agindaasowin, ji-naanaagadawaabanjigeng. | Cloudflare | Agindaasowinan eta, Cloudflare ezhi-ganawendang |
| Visit any page, with analytics on | Coarse page categories and basic engagement, unless you switch analytics off or your browser sends a privacy signal. Never your trips, stops or searches. | Google Analytics, PostHog | Biinish ji-boonitooyan; naadamaaged inaakonigewinan ayaawan. |
| Gegoon ge-maji-aabajichigaadeg | Ozhibii'igan bangii eta ayaamagad. Ogibichitoon aabiji-bagidinigewin. | Nimazina'iganinaanin | 24 diba'iganan |
| Baakin akii-mazina'igan | Gaawiin gegoo. Gimazinaabikiwebinigan ogagwedwen aki-mazina'igan anokiiwin, miinawaa owaabandaan gigagwedwewin. | Aki-mazina'igan gaa-miigiweng | Mìnigewinini odinakonigewinan |
Kin kà-onabandaman
Dibaabandamowin
Pages viewed and basic engagement, by Google Analytics and PostHog. Never your trips, stops or exact location.
Omaa ganawenjigaade
Dibaajimowinan gaa-izhinizha'aman
Nandawaabandan, gidiba'igewin mazina'igan onji
Gaa-izhi-dibendaman
Waabandan, aanjibii'an, gwayakotoon, gemaa gaasiibii'an
Mazina'igan gaawiin wiindamaagesinoon apii gaa-aanjichigaadeg.
Endaso-aanjitoowinAgindamang awenenag bi-izhaawaad
We count visits ourselves, without cookies. Cloudflare counts them too, without cookies. Google Analytics and PostHog count unless you switch analytics off, with one tap in Your choices. A browser privacy signal switches them off for you.
Gaa-izhi-dibendaman
Gigashkitoon ji-waabandaman gaa-gikendamang giin. Gigashkitoon ji-ayaaman bezhig, ji-gwayakotooyan, gemaa ji-gaasiibii'igaadeg. Gaawiin aapiji gidaa-gikenimisiinon ji-izhichigeyang, giishpin aabajitooyan gimazina'igan. Odaapinan izhichigewin imaa Gidinendamowinan.
Awenen kanawendang
| Gagwedwewin | Nakwetamowin |
|---|---|
| Awenen dazhiikang | One independent citizen, named on the independence page. Not OC Transpo, STO or the City. |
| Who owns it | The person who runs it. No company or investor. |
| Who decides what is published | Our published methods. No funder or operator can change a figure. |
| Who pays | The owner pays the costs; donations buy no coverage. Every cost is on the Funding page. |
| Gikendaasowin bakaan awiya gaa-miinind | Map tiles, Cloudflare (visit counts), Google Analytics and PostHog (unless you switch them off), Stripe (donations). The register lists every recipient. |
| Next review | Binàkwe-kìzis 14, 2026 |
- Awenen dazhiikang
- One independent citizen, named on the independence page. Not OC Transpo, STO or the City.
- Who owns it
- The person who runs it. No company or investor.
- Who decides what is published
- Our published methods. No funder or operator can change a figure.
- Who pays
- The owner pays the costs; donations buy no coverage. Every cost is on the Funding page.
- Gikendaasowin bakaan awiya gaa-miinind
- Map tiles, Cloudflare (visit counts), Google Analytics and PostHog (unless you switch them off), Stripe (donations). The register lists every recipient.
Mazina'igan gaawiin wiindamaagesinoon apii gaa-aanjichigaadeg. Next review Binàkwe-kìzis 14, 2026. Endaso-aanjitoowin
The full policy, and your privacy controls
Awenen dibendang Otranspo
- Dibendang miinawaa dazhiikang
- Bezhig bemaadizid Ottawa–Gatineau oodenaang. Dibenindizo. Odizhinikaazowin ozhibii'igaade dibenindizowin mazina'iganing.
- Awenen ganawendang anokiwin
- The owner named above owns Otranspo and is accountable for its product, operations, privacy decisions, security response, and public explanations.
- Ozhibiigewin kanawendjigewin
- The owner named above makes the final choices about what we write and publish. Transit agencies, cities, data providers, hosting companies, analytics providers and donors do not decide what we cover or what we conclude.
- Zhoniya
- The owner named above bears the project’s operating costs. Otranspo carries no advertising. If voluntary donations are available, they do not buy access, favourable coverage, or editorial control.
- Ezhi-ayaamagak
- Otranspo gaawiin OC Transpo, STO, Ottawa oodena, gemaa Gatineau oodena owiijiiwaasiin. Owiidookaan ozhibii'iganan. Gaawiin odanokiitoosiin gichi-odaabaanan.
- Gii-ganawaabanjigaade dibaajimowin
- Manòminike kìsis 14, 2026
- Naagaj miinawaa ganawaabanjigaade wenji-ondinamang
- Binàkwe-kìzis 14, 2026
Omaa nindaabajitoomin Otranspo dibaajimowin miinawaa ozhibii'iganan noongom ayaamagakin. Gaawiin onow inaakonigewin ozhibii'igan. Gaawiin gaye onow ikidowin aanjitoowin gii-ayaamagak noongom. Bakaan mazina'iganan ayaawan ji-waabanjigaadeg aaniin enakamigak noongom, miinawaa gwayakotoowinan.
Wegonen aabajitoowaad ogowe wiidookaagewaad
Maajaawin miinawaa izhaawin nandawaabanjigewinan aabajichigaadewan noongom eta. Otranspo gaawiin ganawendanziin nandawaabanjigewinan gaa-bwaanawitoong gemaa gaa-bagidinamang. Gaawiin maajiidoosiin aandi wenjibaayan, aandi izhaayan, aandi ayaayan, ozhibii'iganan, gemaa izhaawin gikendaasowin.
Kidayàn ondàdjigewinan, abiwinan, bimosewinan, ima eta ki-browser ayàmagan. Kawin Otranspo ondji ayàsinon.
Awiiya daa-wiindamaage giimooj bimibizowin onji, gaawiin ozhibii'igaazosiin. Giishpin gaawiin gikendaagozisig, nawaj bangii apiitendaagwad gidibaajimowin. Mazina'igan giga-miinigoo giimooj. Ganawaabanjigaade jibwaa niibowa dibaajimowinan maamawi-waabanjigaadegin. Giishpin biindigeyan ishkwaaj, gaawiin giimooj dakobidesinoon gidibaajimowin.
Aaniindi ezhi-ayaayan gaawiin ozhibii'igaadesinoon. Eta odaabaan, aaniin minik bemaadizijig gaa-ikidoyan, miinawaa bangii gegoon ganawendaagwad.
Anyone may send a private contact or website-support message. The message and optional reproduction steps are encrypted. An email address is collected only when the sender asks for a reply and gives explicit consent; the message is never treated as evidence of a transit incident or published.
Agindaasowinan gaye mazinaatesijigan ozhibii'iganensan
Essential session, language, security, and offline storage support requested features. Usage analytics is on by default, to help us improve the site. You can turn it off in one tap, and we turn it off automatically if your browser sends Global Privacy Control or Do Not Track. Transit tools remain usable when analytics is off.
Otranspo counts visits with its own counter, built into the site. It sets no cookie and stores no internet address, browser description, or identifier of any kind. For each page view it records only: the type of page, a coarse category address without detailed identifiers or query strings, the language, the website that sent the visit (its name only, such as google.com), a campaign tag if the link carried one, whether the screen is phone, tablet, or desktop size, and the country (with the province inside Canada) given by the hosting network. Each view only adds one to that day’s totals; no record of a single view is kept, and the totals are deleted after 400 days. Rider tasks such as planning a trip or sharing a page are counted the same way, by name only. Tools, service tabs and transitions between coarse sections also add to daily totals, without an identifier or individual journey. Search and trip values are never sent. Campaign tags are removed from the address bar once read. A browser marker for the current tab, which is never sent, stops a reload being counted as a new arrival. Browsers sending Global Privacy Control or Do Not Track are not counted at all.
Cloudflare Web Analytics gaye agindaan aaniin minik bi-ayaawaad. Gaawiin ozhitoosiin cookie. Gaawiin gegoo agindanziin. Gaawiin gikenimaasiin awenen giin. Eta ozhibii'an ezhinikaadeg i'iw mazina'igan. Gaawiin ozhibii'anziin aandi ezhaayan gemaa aandi ayaayan.
Google Analytics is on unless you turn analytics off, and never loads under a browser privacy signal. It measures coarse public page categories and may use analytics cookies, which are removed when you turn it off. Private pages, detailed identifiers, searches, trip endpoints and query strings are excluded. PostHog counts reviewed actions with a shared aggregate identifier, without session recording or individual rider profiles. Vendor requests reach Google and PostHog; they are not described as completely anonymous. These totals are measurements, not a verified count of people.
Gaawiin ningadaawesiimin bemaadizijig ogegoomiwaan. Mazina'iganing, gakina awiya gaa-miinind gegoon owiinzowin ozhibii'igaade, aaniin dash, aaniin apii, wegonen, miinawaa aaniin minik ge-ganawendang. Bakaan awiya gaawiin gegoon da-miinaasii biinish apii gaa-ikidong.
Google Maps: giishpin andawendaman, gidaa-naanaagadawaabandaan
Eta giishpin gagwedweyan ji-ayinaabandaman, Otranspo odizhinizha'aan endazhi-ayaag miinawaa apii wii-maajaayan imaa Google Maps Routes ji-agindaasong odaabii'iwewin, bimosewin, miinawaa dibaabikibidewin. Izhinikaazowinan endazhi-ayaag, gimazina'iganan, gidizhaawinan, gidizhinikaazowin miinawaa gaa-wiindamaageyan gaawiin izhinizha'igaadesinoon.
The comparison response is transient and is not stored or placed in browser history by Otranspo. Core transit planning works without this comparison. Google processes the request under its own terms and privacy policy.
Access, export, correction, withdrawal, and deletion
Signed-in riders can use the authenticated privacy endpoints to export or delete account-linked Otranspo records. A deletion request preserves only legally or operationally required audit evidence in de-identified form.
An anonymous report or contact sender receives a private receipt capability. Use that receipt with the authorized privacy contact for an access, correction, withdrawal, or deletion request; it is not a public sharing link.
Do not place sensitive journey or safety information in a general contact message. Use the authorized privacy contact shown on the contact page for a rights request.
Retention
Gaa-wiindamaageyan ganawendaagwad 365 giizhigoon. Aanind ozhibii'iganan 24 diba'iganan eta. Bimiwizhiwewin gikendamowinan gaawiin bimaadiziig ozhibii'iganan.
Gaa-wiindamaageyan ganawendaagwad megwaa anokiing. Ishkwaa-anokiing, gaawiin ayaasinoon ishkwaa 365 giizhigoon. Giishpin gigaasiibii'aan gidizhinikaazowin, gaye gaasiibii'igaade.
Gegoon gaa-ganawendaman eta imaa gidinaabiwin (browser) ayaa biinish giin gaa-maajitooyan, gemaa gaa-gaasiitooyan. Gaye daa-maajiinjigaade.
Aandi ge-izhaamagak gikendaasowin
Endaso-ozhibii'igan wiindamaage awenen gaa-miinind, aaniin gaa-onji-izhichigeng, gegoo gaa-izhinizha'igaadeg, miinawaa aaniin apii ganawendaming Otranspo. Giishpin 'giishpin' izhibii'igaadeg, gaawiin noongom ayaasinoon.
Otranspo gaawiin odadaawesiin boozijig ogikendaasowiniwaan. Gaawiin ozhitoosiin gagiikimaagewin. Gaawiin omiinaasiin awiya ji-aabajitood giimooj dibaajimowin ji-waabanda'iwed.
Vercel
Noongom anokiimagad- Wegonen wendji
- Ganawendan Otranspo website miinawaa API, izhinizha'an gagwejigewinan, miinawaa ganawendan.
- Apii izhiwebak
- Apii browser andawendang Otranspo page, asset, gemaa API operation.
- Gaa-izhinizhaang
- URL, network, browser gegoo, miinawaa API ozhibii'igan giishpin izhinizha'aman. Otranspo ogiimoodaan aanind URL ozhibii'iganan. URL wiin daa-izhaa.
- Aaniin minik ganawendaagwak
- Otranspo ganawendaan babaamaadizijig ozhibii'iganan eta apii ezhi-wiindamaagemagak dazhi. Awiya gaa-wiidookaagenid odayaanan ozhibii'iganan. Gaawiin dash babaamaadizijig odizhiwebiziwiniwaan aawanzinoon.
Supabase
Noongom anokiimagad- Wegonen wendji
- Ganawendan Otranspo PostgreSQL ozhibii'iganan. Gidaa-aabajitoon ji-biindigeyan.
- Apii izhiwebak
- Apii agindang gemaa ozhibii'ang mazina'iganan. Gemaa apii awiya inendang wii-biindiged.
- Gaa-izhinizhaang
- Otranspo ozhibii'iganan eta onji anokiiwin. Ji-biindigeyan: gidizhinikaazowin, gid-email, miinawaa apii gaa-biindigeyan. Bezhig anokiiwin odayaanan. Giishpin biindigeyan, gaawiin ataagaadesinoon gigiimooj babaamaadiziwin.
- Aaniin minik ganawendaagwak
- Gidizhaawinan miinawaa aandi gaa-izhaayan ayaamagadoon gidoozhibii'iganing eta. Giimooj wiindamaagewinan gaasiibii'igaadewan 365 giizhigad ishkwaa. Bakaan mazina'iganan gaasiibii'igaadewan 24 dibaigan ishkwaa. Bakaan gegoon wiindamaagewan gaasiibii'igaadeg.
Cloudflare Web Analytics
Noongom anokiimagad- Wegonen wendji
- Bakaan awiya ganawaabandang aaniin minik awiyag gaa-bi-izhaawaad Otranspo. Gaawiin gegoo ganawendaagwasinoon, gaawiin gaye awiya ozhibii'igaadesiin.
- Apii izhiwebak
- Endaso-bi-izhaayan omaa.
- Gaa-izhinizhaang
- Aaniindi ayaag mazina'igan, gaawiin dash gaa-andawaabandaman. Miinawaa bangii gegoo Cloudflare odaabajitoon. Gaawiin ganawendanziinan: gaa-andawaabandaman, aaniindi ayaayan, aandi ezhaayan, gaa-ozhibii'aman, gaa-asinaman.
- Aaniin minik ganawendaagwak
- Otranspo eta odagindaanan awiiyag. Gaawiin ozhibii'anziin awenen.
Upstash (Otranspo agindaasowin)
Noongom anokiimagad- Wegonen wendji
- Ganawendan kakina kìjigad kà-agindjigàdeg Otranspo pìndigewinan.
- Apii izhiwebak
- On each page view or finished rider task, except in browsers sending Global Privacy Control or Do Not Track.
- Gaa-izhinizhaang
- Eta agindaasowinan: mazina'igan ezhinaagwak, mazina'igan endaang, inwewin, wenji-bi-izhaayan, izhinikaazowin, aabajichigan apiitag, aki miinawaa Canada aki, miinawaa anokiiwinan. Gaawiin inizhaasinoon internet endaang, aabajichigan ezhinaagwak, cookie, gemaa izhinikaazowin.
- Aaniin minik ganawendaagwak
- Eta endaso-gìjigak minik. Webinigàde 400 gìjigak ishkwàj. Kawin ojibiigàdesinon ningo masinaigan wàbandamowin.
Google Analytics
- Wegonen wendji
- Agindan aaniin ezhi-aabajichigaadeg omaa. Gaawiin adaawaagewin.
- Apii izhiwebak
- Enabled by default after the site notice is shown, unless the rider has refused analytics or Do Not Track or Global Privacy Control is active. Private pages are excluded.
- Gaa-izhinizhaang
- Ozhibii'iganan: mazina'igan izhinikaazowin, aandi gaa-onjibaayan, aaniin gii-aabajitooyan, Google cookie. Gaawiin: aandi ayaayan, gagwedwewinan, miikanan, gidoozhibii'iganan.
- Aaniin minik ganawendaagwak
- Withdrawing consent stops new measurement and removes Otranspo-visible Google Analytics browser identifiers. Provider-held events remain subject to the configured analytics property and Google’s policy.
PostHog
- Wegonen wendji
- Bangii eta gegoon ningagindaanan. Otranspo da-mikaan aaniindi gaawiin minosesinog.
- Apii izhiwebak
- Enabled by default when the governed aggregate-only configuration is available, unless the rider has refused analytics or a browser privacy signal is active.
- Gaa-izhinizhaang
- Anind eta kikendamowinan: inwewin, mazinàdjigan, ènàbadjitòyan, kaye kà-izhichigeyan. Kawin mazinahiganan, kawin kidinwewinan, kawin andi ayàyan, kawin kidibimosewinan.
- Aaniin minik ganawendaagwak
- Gaawiin gidizhinikaazowin aabajichigaadesinoon. Maamawi-wiinzowin eta aabajichigaade. Nandotamowinan wiin dagoshinoon PostHog-ing, mii iw gaawiin indikidosiimin gaawiin awiya da-gikendaagozisiin. PostHog ganawendaan gaa-izhiwebak bezhig biboon. Giishpin gibagidinaan o'o, gaawiin oshki-ikidowinan da-ozhibii'igaadesinoon, miinawaa gakina gegoon da-aabajichigaade.
Google Maps Routes
- Wegonen wendji
- Agindan apii ge-ayaayan odaabaaning, ge-bimoseyan, gemaa ge-bimibizoyan.
- Apii izhiwebak
- Eta apii awiya gagwedwed wii-gikendang aaniin ezhi-bakaanak aanind izhaawinan.
- Gaa-izhinizhaang
- Aandi wenji-maajaayan miinawaa aandi ezhaayan, miinawaa apii wii-maajaayan. Gaawiin ataagaadesinoon: izhinikaazowinan, izhinikaazowinan gaa-ganawenjigaadegin, babaa-izhaawin mazina'iganan, gidizhinikaazowin, miinawaa gidozhibii'iganan.
- Aaniin minik ganawendaagwak
- Otranspo treats the response as transient and does not store it or add it to recent trip history. Google processes the request under its own terms and privacy policy.
OpenStreetMap Standard, mazinaakizon noongom aabajichigaadeg
Noongom anokiimagad- Wegonen wendji
- Ozhibii'an aki-mazina'igan ishkweyaang noogishkaawinan, odaabaanan, miinawaa miikanan.
- Apii izhiwebak
- Pii babaamaadizid odaabajitood akiing mazina'igan.
- Gaa-izhinizhaang
- Gidaabajichigan ogagwedwemagan aki-mazinaigan ezhi-waabanjigaadeg. Gaawiin izhinizhaasinoon gimoodj mazinaiganan, gidizhinikaazowin, gemaa gidaandi-ayaawinan.
- Aaniin minik ganawendaagwak
- Otranspo gaawiin oganawendanziin aki-mazina'igan gaa-waabandang awiya. Aki-mazina'igan gaa-miigiweng odinaakonigewinan ogaa-dibendaanan.
Stripe
Noongom anokiimagad- Wegonen wendji
- Host an optional donation checkout and issue the processor’s payment receipt.
- Apii izhiwebak
- Only when a person chooses Continue to secure checkout on the donation page. Viewing rider information or the funding page sends nothing to Stripe.
- Gaa-izhinizhaang
- Donation amount and frequency, a private Otranspo donation reference, and the payment and receipt details entered directly on Stripe. Otranspo never receives or stores card or bank details.
- Aaniin minik ganawendaagwak
- Otranspo schedules minimum accounting, refund, dispute, and reconciliation records for deletion seven years and one day after their retention anchor. Optional encrypted donor contact details are erased after 400 days or earlier on request. Card and bank details remain with Stripe.
OC Transpo gemaa STO
- Wegonen wendji
- Let a rider reach the official operator for fares, emergencies, accessibility help, complaints, or authoritative service decisions.
- Apii izhiwebak
- Eta giishpin awiya odaapinang mazinaigan gwayak ezhinikaadeg, ji-izhaad omaa odaabaan ogimaa gaa-onaabamaad.
- Gaa-izhinizhaang
- Otranspo does not transmit a private Otranspo report. The destination site receives the normal navigation request and whatever the rider chooses to provide there.
- Aaniin minik ganawendaagwak
- Ishkwaa, awenen bimibide'ang odibendaan gikendamowin gaa-miinind.
Your privacy controls
Before you export or delete
Four data scopes, four separate controls
A server download or deletion cannot reach every place where information may exist. Review each scope first so the result says exactly what changed and what still needs a separate action.
Deleting Otranspo records does not clear this browser, delete a shared sign-in identity, or cancel a monthly donation. Each needs its own action below.
This browser and device
Local to this deviceThese records stay in browser storage and remain usable without an account.
Inspect or clear this device’s dataDetails about this data and its limits
What this includes
- saved places and recent searches
- recent or active trips
- unfinished report and crowding drafts
- local notification inbox, map choices, language and rider preferences
- Export result
- They are not in the server export because the server cannot read them. Settings shows the local categories that this browser can inspect and clear.
- Deletion result
- Deleting Otranspo service records does not clear this browser. Clear the chosen local category in Settings on each device you used.
Otranspo service records
Controlled by the signed-in ownerThese are records in Otranspo’s database that are linked to the current account.
Go to the owner-only exportDetails about this data and its limits
What this includes
- private reports, contact cases and privacy requests
- route requests, votes, proposal support and crowding submissions
- account saves and merge history
- journey watches, recurring journeys, devices, consents, delivery history and access grants
- Export result
- The owner-only JSON download includes current account-linked records and identifies intentionally excluded secrets such as notification addresses and replaceable encrypted coordinates.
- Deletion result
- Permanent deletion removes each covered category inside one transaction and re-counts every category before claiming success. A short pseudonymous audit and replay-safe receipt remain under their stated limits.
Shared sign-in identity
Separate account-service recordThe account identifier, email, authentication methods and sessions belong to the shared Supabase identity service.
Ask for shared account removal stepsDetails about this data and its limits
What this includes
- account identifier and email
- password, passkey or configured sign-in method
- authentication sessions and security events
- Export result
- These records are not included in an Otranspo export. The export names the processor and the boundary instead of silently copying the identity into Otranspo.
- Deletion result
- Otranspo deletion does not delete the sign-in identity. Complete Otranspo deletion first if desired, then use the private privacy intake to request the account-service steps and learn which other service sessions may be affected.
Donation and payment records
Controlled by a private donation receiptStripe holds card or bank details. Otranspo holds only the minimum donation, accounting, refund, dispute and optional contact records described on the funding pages.
Open donation receipt and management helpDetails about this data and its limits
What this includes
- Stripe payment method and processor receipt
- donation amount, frequency and private Otranspo receipt
- optional encrypted contact details
- separate optional public-recognition choice
- Export result
- Donation records are receipt-scoped rather than joined to the Otranspo account export. Otranspo never exports card or bank details because it never receives them.
- Deletion result
- Otranspo account deletion does not cancel a monthly donation or erase records under financial retention. Use the private donation receipt to manage recurrence, erase optional contact details or remove public recognition.
Opening a linked control carries only the page address and the purpose named in the link. Otranspo does not merge browser, account, journey, report, donation, or payment records across services behind the scenes.
Consent register
Each optional use has its own decision
There is no single accept-all switch. Changing one choice affects only the purpose and records named in that row.
Optional analytics
Manage optional analytics- Applies to
- This browser
- How state is known
- Shown and changed directly below. Browser privacy signals keep it off.
- What changing it does
- Turning it off stops future optional collection, removes Otranspo-visible Google Analytics identifiers and leaves all rider tools working.
Exact journey monitoring and closed-page delivery
Manage journeys and delivery devices- Applies to
- One activated journey watch and one delivery device
- How state is known
- Granted during watch activation; browser permission alone is not consent or registration.
- What changing it does
- Ending the watch stops future checks. Revoking the registered device stops future delivery without changing other saved routes or trips.
Working location, live sharing and support access
Review or revoke journey grants- Applies to
- One active journey, recipient and short purpose
- How state is known
- Separate expiring grants are listed in Journey privacy; a location grant is not a sharing or support grant.
- What changing it does
- Revocation immediately ends that access. The replaceable working point expires within five minutes and does not create a movement trail.
Private contribution and any public aggregate use
Open contribution receipts- Applies to
- One report, observation or request
- How state is known
- Confirmed during that submission. Public rail evidence requires a second explicit choice and moderation.
- What changing it does
- Withdrawal follows the private receipt and stops future permitted use where policy allows; it does not erase already de-identified public aggregates.
Donation receipt or project-update contact
Manage from a private donation receipt- Applies to
- One private donation receipt
- How state is known
- Off until a person asks for contact and separately consents to encrypted retention.
- What changing it does
- Erasing contact removes the optional name and email while retaining only records required for accounting, refunds or disputes.
Public donor recognition
Manage public recognition- Applies to
- One donation receipt and one chosen display name
- How state is known
- Separate from contact consent and off by default. A contact name is never treated as permission to publish it.
- What changing it does
- Turning recognition off removes the name from future supporter-page output without cancelling the donation or receipt contact choice.
What works without an account
Reading rider information, changing consent on this device, and asking a privacy question do not require an account.
Access, export, correction, scoped deletion review, appeal, and permanent deletion of account-linked records require the signed-in account owner.
Saved places, recent searches, and unfinished drafts stay on this device. The server cannot export or delete them.
Manage device-only data in SettingsSite usage analytics
Optional analytics is off on this device.
Turning optional analytics off stops future optional collection on this device immediately. The page reloads to apply the new setting everywhere.
Previously aggregated or de-identified measurements cannot be traced back to this device and therefore cannot be reversed.
Access or export account-linked records
The download contains only records linked to this Otranspo account. It does not contain browser-only data or records held by the shared identity provider.
Delete account-linked Otranspo data
Review every item below. This action permanently deletes the account-linked records that Otranspo can verify, while browser data, the shared sign-in identity and payment records keep their separate controls.
Deletion review
- Account-linked reports, requests, votes, crowding submissions, private contact cases, and rider scores in the Otranspo database are deleted where no documented exception applies.
- Device-only saves and drafts stay on this browser until you clear them in Settings; the server cannot reach them.
- Notification endpoints and synced saves are removed only when they exist in the account-linked Otranspo systems covered by the verified deletion response.
- Donation and payment records may have separate legally required financial retention and are not claimed deleted by this control.
- Public aggregate statistics that no longer identify a person are not reversed.
- After successful permanent deletion, the deleted account-linked records cannot be restored.
- The shared authentication account is not deleted by this Otranspo-specific action.
Sign in as the account owner before submitting or changing account-linked records.
Ask a privacy question without an account
Use the private contact form for a general question or to ask for another identity-verification method. Do not send identity documents.
Open the privacy contact form