- ᐅᖃᓕᒫᕐᓂᖅ
- Privacy and data rights
ᐱᑕᖃᓐᖏᓐᓇᐅᔭᕐᓗᑕ ᐃᓕᖕᓂᒃ ᑐᓴᐅᒪᔾᔪᑎᓂᒃ ᐱᓯᒪᑦᑕᐃᓕᓇᓱᒃᑐᒍᑦ, ᓂᐅᕕᖅᑎᑦᑎᓐᖏᑦᑐᑦᓯᐊᕆᐊᖃᖅᑕᕗᑦ.
ᐊᑎᓕᐅᖅᓯᒪᔭᕆᐊᖃᙱᑦᑐᑎᑦ. ᐃᓅᑉ ᐊᐅᓪᓚᓂᖏᑦ ᑐᓴᖅᑎᑦᑎᓂᖏᓪᓘᓐᓃᑦ ᐊᑎᖓᓂᒃ ᐃᓚᓕᐅᑎᓪᓗᒋᑦ ᓴᖅᑭᑎᑦᑎᓐᓂᐊᙱᑦᑐᒍᑦ. ᑖᓐᓇ ᒪᒃᐱᒐᖅ ᑕᑯᔭᐅᑎᑦᑎᕗᖅ ᓱᓇᑐᐃᓐᓇᓂᒃ ᐱᑕᖃᖅᑎᑦᑎᔪᒍᑦ, ᓇᒥ, ᐊᒻᒪ ᖃᓄᖅ ᐊᑯᓂᐅᑎᒋᔪᒥᒃ.
ᓱᓇᓂᒃ ᑐᖁᔭᖅᐸᒃᐱᑕ, ᐊᒻᒪ ᖃᓄᖅ ᐊᑯᓂᐅᑎᒋᓗᒋᑦ
- not storedSearches
- your device onlyᐱᑐᐃᓐᓇᖅᑕᑎᑦ ᓄᖃᖅᑕᕐᕕᐃᑦ ᐊᒻᒪ ᐊᐅᓪᓚᕐᓂᐅᔪᑦ
- Reports and crowdingour database · up to 365 days
- Messages to usencrypted · 365 days after closing
- Visitscounted, no cookie · 400 days
- Visits, second countCloudflare · counts only
- ᖃᐅᔨᓴᕐᓂᖅOn. Pages viewed and basic engagement, by Google Analytics and PostHog, unless you switch it off. Never your trips, stops or searches.
- Scrambled network addressto stop abuse · 24 hours
- Map tilesthe map provider sees your request
| ᐱᓕᕆᒃᑯᕕᑦ | ᑐᖁᓯᒪᔭᕗᑦ | ᓇᓃ | ᖃᓄᖅ ᐊᑯᓂᐅᑎᒋᓂᖓ |
|---|---|---|---|
| ᕿᓂᕆᐊᖅ ᑐᑭᓯᒋᐊᕐᕕᖕᒥ | ᓱᓇᖃᙱᑦᑐᖅ. ᕿᓂᕐᓂᑏᑦ ᐃᓱᓕᑦᑎᙱᑕᑎᑦ ᑐᖁᔭᐅᙱᑦᑐᑦ. ᓇᓃᑦ ᓱᓕᔪᑦ ᐊᐅᓪᓚᖅᑎᑕᐅᙱᑦᑐᑦ ᖃᐅᔨᓴᕐᓂᕐᒧᑦ. | ᓇᓂᓕᒫᖅ ᐱᑕᖃᙱᑦᑐᖅ | ᑐᖁᔭᐅᖏᑦᑐᖅ |
| ᑐᖅᑯᐃᓗᒍ ᓄᖅᑲᖓᕐᕕᒃ, ᐃᓂ ᐅᕝᕙᓘᓐᓃᑦ ᐃᖏᕐᕋᓂᖅ | ᑎᑎᕋᖅᓯᒪᔪᑦ. ᑖᓐᓇ ᖃᕆᓴᐅᔭᕐᒥ ᐃᓂᖃᐃᓐᓇᖅᑐᖅ. ᑕᑯᓇᔭᙱᑦᑕᕗᑦ. | ᓴᓇᕐᕈᑎᑦ | ᐲᖅᓯᓂᖅᐱᑦ ᑎᑭᓪᓗᒍ |
| ᑐᓴᖅᑎᑦᑎᓂᖅ ᐊᐅᓪᓚᖅᑎᑦᑎᓗᒍ | ᐅᓂᒃᑳᖅ ᐊᒻᒪ ᐃᓕᓐᓄᑦ ᑭᓯᐊᓂ ᓇᓗᓇᐃᖅᓯᒍᑎ. ᐊᑎ ᑐᖅᑯᖅᑕᐅᙱᑦᑐᖅ. ᓇᒦᓐᓂᖅ ᓱᓕᔪᖅ ᑐᖅᑯᖅᑕᐅᙱᑦᑐᖅ. | ᑐᑭᓯᒋᐊᕈᑎᕗᑦ ᖃᕆᑕᐅᔭᒃᑯᑦ | 365 ᐅᓪᓗᑦ ᑎᑭᓪᓗᒋᑦ |
| ᑎᑎᕋᕐᓗᑎᑦ ᐅᕙᑦᑎᓐᓄᑦ | ᑎᑎᖅᑲᖅᐱᑦ. ᐊᓯᖏᓐᓄᑦ ᐅᖃᓕᒫᒐᒃᓴᐅᙱᑦᑐᖅ. ᐃᒥᐊᓪ ᑐᕌᕈᑎᑎᑦ ᑭᐅᔭᐅᔪᒪᒍᕕᑦ ᑭᓯᐊᓂ. | ᑐᑭᓯᒋᐊᕈᑎᕗᑦ ᖃᕆᑕᐅᔭᒃᑯᑦ | ᒪᑐᔭᐅᒻᒪᑦ ᑭᖑᓂᖓᒍᑦ 365 ᐅᓪᓗᓂ |
| ᓱᓇᑐᐃᓐᓇᖅ ᒪᑉᐱᒐᖅ ᐳᓛᕆᐊᕐᓗᒍ | ᐅᓪᓗᑕᒫᑦ ᓈᓴᐃᓂᖅ ᒪᑉᐱᒐᐅᑉ ᖃᓄᐃᑦᑑᓂᖓᒍᑦ, ᐅᖃᐅᓯᖓᒍᑦ ᓄᓇᖓᒍᓪᓗ. ᑯᑭ ᐊᑐᖅᑕᐅᙱᑦᑐᖅ. ᑐᕌᕈᑎ ᐊᑐᖅᑕᐅᙱᑦᑐᖅ. | ᓈᓴᐅᑎᕗᑦ ᓇᒻᒥᓂᖅ | 400 ᐅᓪᓗᑦ |
| ᓇᓪᓕᐊᓐᓂᒃ ᒪᑉᐱᒐᕐᒥᒃ ᑕᑯᓗᑎᑦ, ᐊᐃᐱᐊᒍᑦ ᓈᓴᐅᑎᓕᐊᖑᔪᖅ | ᐊᓯᐊᓂᑦ ᓈᓴᐃᓂᖅ ᑕᑯᔭᖅᑐᖅᓯᒪᔪᓂᒃ, ᖃᕆᑕᐅᔭᓐᓂ ᓇᓗᓇᐃᒃᑯᑎᓂᒃ ᑐᖅᑯᖅᓯᙱᖦᖢᓂ. ᓯᓚᑖᓂᑦ ᖃᐅᔨᓴᕈᑎ. | Cloudflare | Counts only, under Cloudflare’s controls |
| Visit any page, with analytics on | Coarse page categories and basic engagement, unless you switch analytics off or your browser sends a privacy signal. Never your trips, stops or searches. | Google Analytics, PostHog | ᓄᖅᑲᖅᑎᑦᑎᓐᓂᖅᐱᑦ ᑎᑭᓪᓗᒍ. ᐱᑕᖃᖅᑎᑦᑎᔪᑉ ᒪᓕᒐᖏᑦ ᐊᑐᖅᑐᑦ. |
| ᑭᓱᑐᐃᓐᓇᖅ ᐊᑐᕐᓗᐊᖅᑕᐅᔪᓐᓇᖅᑐᖅ | ᑎᑎᕋᖅᓯᒪᔪᖅ ᐊᑯᓂᐅᙱᑦᑐᒥᒃ ᐱᑕᖃᖅᑐᖅ. ᑕᓐᓇ ᐅᓂᒃᑳᑦ ᐊᒥᓲᓗᐊᖅᑐᑦ ᑐᓂᔭᐅᖃᑦᑕᕐᓂᖏᑦ ᓄᖅᑲᖅᑎᑦᑎᔪᖅ. | ᑐᑭᓯᒋᐊᕈᑎᕗᑦ ᖃᕆᑕᐅᔭᒃᑯᑦ | 24 ᐃᑲᕐᕋᐃᑦ |
| ᓄᓇᙳᐊᖅ ᒪᑐᐃᕐᓗᒍ | ᐱᑕᖃᙱᑦᑐᖅ. ᖃᕆᑕᐅᔭᑉ ᐃᑭᐊᖅᑭᕕᐊ ᓄᓇᙳᐊᓕᐅᖅᑎᒥᑦ ᑐᒃᓯᕋᖅᐳᖅ ᓄᓇᙳᐊᑉ ᐃᓚᖏᓐᓂᒃ. ᓄᓇᙳᐊᓕᐅᖅᑎ ᑕᑯᔪᖅ ᑐᒃᓯᕋᐅᑎᒋᔭᕐᓂᒃ. | ᓄᓇᙳᐊᕐᒥᒃ ᑐᓂᓯᔨ | ᑐᑭᓯᒋᐊᕈᑎᓂᒃ ᑐᓂᔨᐅᑉ ᒪᓕᒐᖏᑦ |
ᓂᕈᐊᖅᑕᑎᑦ
ᖃᐅᔨᓴᕐᓂᖅ
Pages viewed and basic engagement, by Google Analytics and PostHog. Never your trips, stops or exact location.
ᐅᓂᒃᑳᑦ ᑐᓂᔭᑎᑦ
ᕿᓂᕐᓗᒍ ᐊᑭᓕᖅᓯᒪᓂᕐᒧᑦ ᓇᓗᓇᐃᖅᓯᒍᑎᒃᑯᑦ
ᐱᔪᓐᓇᐅᑎᑎᑦ
ᑕᑯᓗᒍ, ᐊᔾᔨᓕᐅᕐᓗᒍ, ᓈᒻᒪᒃᓴᓗᒍ ᐲᖅᓯᓗᒍᓘᓐᓃᑦ
ᑖᓐᓇ ᒪᑉᐱᒐᖅ ᓱᓕ ᓇᓗᓇᐃᖅᓯᙱᑦᑐᖅ ᖃᖓ ᑭᖑᓪᓕᖅᐹᒥ ᐊᓯᔾᔨᖅᑕᐅᓚᐅᖅᓯᒪᓂᖓᓂᒃ.
ᐊᓯᔾᔨᕐᓂᐅᔪᑦ ᑕᒪᕐᒥᑦᑎᑭᑦᑕᕐᓂᕐᓂᒃ ᓈᓴᐃᓂᖅ
We count visits ourselves, without cookies. Cloudflare counts them too, without cookies. Google Analytics and PostHog count unless you switch analytics off, with one tap in Your choices. A browser privacy signal switches them off for you.
ᐱᔪᓐᓇᐅᑎᑎᑦ
ᑕᑯᔪᓐᓇᖅᑐᑎᑦ ᑐᑭᓯᒋᐊᕈᑎᑦ ᐃᓕᖕᓂᒃ ᐱᑕᖃᖅᑐᑦ. ᐊᔾᔨᖓᓂᒃ ᐱᔪᓐᓇᖅᑐᑎᑦ, ᓈᒻᒪᒃᓴᐃᔪᓐᓇᖅᑐᑎᑦ, ᐲᖅᑎᑦᑎᔪᓐᓇᖅᑐᑎᓪᓘᓐᓃᑦ. ᐅᓄᖅᑐᑦ ᐱᓕᕆᐊᕆᔪᓐᓇᖅᑕᕗᑦ ᑭᓇᐅᓂᕐᓂᒃ ᓇᓗᓗᑕ, ᐊᑭᓕᐅᑎᓂᒃ ᓇᓗᓇᐃᖅᓯᒍᑎᑎᑦ ᐊᑐᕐᓗᒍ. ᓂᕈᐊᕐᓗᒍ ᐱᔪᓐᓇᐅᑎ ᓂᕈᐊᖅᑕᒃᓴᑎᑦ ᐃᒪᖓᓂ.
ᑭᓇ ᑭᒡᒐᖅᑐᐃᔨᐅᕙ ᐅᓇ ᐃᑭᐊᖅᑭᕕᒃᑯᑦ ᑐᑭᒧᐊᒃᑐᖅ
| ᐊᐱᖅᑯᑎ | ᑭᐅᔾᔪᑎ |
|---|---|
| ᑭᓇ ᐊᐅᓚᑦᑎᔪᖅ | One independent citizen, named on the independence page. Not OC Transpo, STO or the City. |
| Who owns it | The person who runs it. No company or investor. |
| Who decides what is published | Our published methods. No funder or operator can change a figure. |
| Who pays | The owner pays the costs; donations buy no coverage. Every cost is on the Funding page. |
| ᑐᓴᒐᒃᓴᑦ ᐊᓯᖏᓐᓄᑦ ᑐᓂᔭᐅᔪᑦ | Map tiles, Cloudflare (visit counts), Google Analytics and PostHog (unless you switch them off), Stripe (donations). The register lists every recipient. |
| Next review | ᐅᒃᑐᐱᕆ 14, 2026 |
- ᑭᓇ ᐊᐅᓚᑦᑎᔪᖅ
- One independent citizen, named on the independence page. Not OC Transpo, STO or the City.
- Who owns it
- The person who runs it. No company or investor.
- Who decides what is published
- Our published methods. No funder or operator can change a figure.
- Who pays
- The owner pays the costs; donations buy no coverage. Every cost is on the Funding page.
- ᑐᓴᒐᒃᓴᑦ ᐊᓯᖏᓐᓄᑦ ᑐᓂᔭᐅᔪᑦ
- Map tiles, Cloudflare (visit counts), Google Analytics and PostHog (unless you switch them off), Stripe (donations). The register lists every recipient.
ᑖᓐᓇ ᒪᑉᐱᒐᖅ ᓱᓕ ᓇᓗᓇᐃᖅᓯᙱᑦᑐᖅ ᖃᖓ ᑭᖑᓪᓕᖅᐹᒥ ᐊᓯᔾᔨᖅᑕᐅᓚᐅᖅᓯᒪᓂᖓᓂᒃ. Next review ᐅᒃᑐᐱᕆ 14, 2026. ᐊᓯᔾᔨᕐᓂᐅᔪᑦ ᑕᒪᕐᒥᑦ
The full policy, and your privacy controls
Otranspo ᑲᒪᔨᖓ ᑭᓇ
- ᓇᖕᒥᓂᖃᖅᑎ ᐊᐅᓚᑦᑎᔨᓗ
- One independent Ottawa–Gatineau citizen, named on the independence page
- ᐱᔨᑦᑎᕋᐅᑎ ᑲᒪᒋᔭᐅᓂᖓ
- The owner named above owns Otranspo and is accountable for its product, operations, privacy decisions, security response, and public explanations.
- ᑎᑎᕋᖅᓯᒪᔪᑦ ᐊᐅᓚᑦᑎᓂᖏᑦ
- ᓇᒻᒥᓂᖁᑎᓕᒃ ᖁᓛᓂ ᐊᑎᖃᖅᑐᖅ ᐃᓱᒪᓕᐅᖅᑎᐅᔪᖅ ᑭᖑᓪᓕᖅᐹᒥ ᑎᑎᕋᖅᑕᐅᔪᓄᑦ ᓴᖅᑭᑎᑦᑎᓂᕐᒧᓪᓗ. ᐸᓯᓕᕆᔩᑦ, ᓄᓇᓖᑦ, ᑐᑭᓯᒋᐊᕈᑎᓂᑦ ᑐᓂᓯᔩᑦ, ᖃᕆᑕᐅᔭᓕᕆᔩᑦ, ᖃᐅᔨᓴᖅᑏᑦ, ᑮᓇᐅᔭᓂᒡᓗ ᑐᓂᓯᔩᑦ ᐊᐅᓚᑦᑎᙱᑦᑐᑦ ᓱᓇᓂᒃ ᑎᑎᕋᖅᑕᐅᓂᐊᕐᒪᖔᑦ.
- ᑮᓇᐅᔭᖃᖅᑎᑕᐅᓂᖓ
- The owner named above bears the project’s operating costs. Otranspo carries no advertising. If voluntary donations are available, they do not buy access, favourable coverage, or editorial control.
- ᐱᔪᓐᓇᐅᑎᓕᒃ ᖃᓄᐃᓕᖓᓂᖓ
- Otranspo ᐃᓚᒋᔭᐅᖏᑦᑐᖅ, ᐱᔾᔪᑎᒋᔭᐅᖏᑦᑐᖅ, ᐊᐅᓚᑕᐅᖏᑦᑐᖅ OC Transpo, STO, ᐋᑐᕚ ᓄᓇᓕᐊ, ᐅᕝᕙᓘᓐᓃᑦ ᒑᑎᓄ ᓄᓇᓕᐊ ᐱᓪᓗᒋᑦ. ᐃᓚᓯᒋᐊᖅᓯᔪᖅ ᐱᓪᓗᒋᐊᖅᑐᓄᑦ ᑐᓴᐅᒪᔾᔪᑎᓄᑦ. ᐃᖏᕐᕋᑎᑦᑎᓂᕐᒥᒃ ᐊᐅᓚᑦᑎᖏᑦᑐᖅ.
- ᐱᓕᕆᐊᒃᓴᒧᑦ ᓇᓗᓇᐃᖅᓯᒋᐊᕐᓂᖅ ᕿᒥᕐᕈᐊᖅᑕᐅᓯᒪᔪᖅ
- ᓯᑎᐱᕆ 14, 2026
- ᑐᓴᐅᑏᑦ ᓄᐃᕝᕕᖏᑦ ᕿᒥᕐᕈᔭᐅᑲᓐᓂᕐᕕᒃᓴᖓ
- ᐅᒃᑐᐱᕆ 14, 2026
ᐅᓇ ᕿᒥᕐᕈᐊᖅᑕᐅᓂᖅ ᐊᔾᔨᒌᖕᖏᑦᑐᓕᐅᖅᑎᑦᑎᕗᖅ ᑭᒃᑯᓕᒫᓄᑦ ᓇᓗᓇᐃᖅᓯᓂᕐᒥᒃ, ᒫᓐᓇᐅᔪᒥᒃ ᖃᕆᑕᐅᔭᒃᑯᑦ ᐱᓕᕆᐊᒃᓴᒥᒃ, ᐊᒻᒪ ᐋᖅᑭᒃᓱᖅᑕᐅᓯᒪᔪᓂᒃ ᒪᓕᒐᓂᒃ. ᐅᓇ ᒪᓕᒐᓕᕆᔨᐅᑉ ᐃᓱᒪᒋᔭᖓ ᐅᖏᑦᑐᖅ. ᐅᓇ ᓇᓗᓇᐃᖅᓯᖏᑦᑐᖅ ᓄᑖᖑᖅᑎᑕᐅᓂᐊᖅᑐᖅ ᐊᑐᖅᑕᐅᓕᖅᓯᒪᓂᖓᓂᒃ. ᒫᓐᓇ ᐱᔨᑦᑎᕋᐅᑎᐅᑉ ᖃᓄᐃᓕᖓᓂᖓ ᐊᒻᒪ ᐋᖅᑭᒋᐊᖅᑕᐅᓯᒪᔪᑦ ᓇᒻᒥᓂᖅ ᓇᓗᓇᐃᖅᓯᔾᔪᑎᖃᖅᐳᑦ ᐊᓯᖓᓂ ᒪᑐᐃᖓᔪᒥ.
ᐃᖏᕐᕋᔾᔪᑎᓕᐊᖃᑦᑕᖅᑐᓄᑦ ᐱᔨᑦᑎᕋᐅᑎᐅᑉ ᐊᐅᓚᑦᑎᔭᖏᑦ
ᐊᐅᓪᓚᕐᓂᕐᒧᑦ ᐃᖏᕐᕋᓂᕐᒧᓪᓗ ᕿᓂᕐᓂᑦ ᐊᐅᓚᑦᑕᐅᔪᑦ ᒫᓐᓇ ᐊᐱᖅᑯᑎᒥᒃ ᑭᐅᓂᐊᕐᓗᑎᒃ. Otranspo ᑐᖁᓯᒪᑎᑦᑎᙱᑦᑐᖅ ᕿᓂᕐᓂᓂᒃ ᐱᔭᕇᖅᓯᒪᙱᑦᑐᓂᒃ ᓄᖑᑎᑕᐅᓯᒪᔪᓂᓪᓘᓐᓃᑦ. ᐊᐅᓪᓛᕐᕕᐅᔪᓂᒃ, ᑎᑭᕕᐅᔪᓂᒃ, ᓇᐅᓐᓂᖏᓐᓂᒃ, ᑎᑎᕋᖅᓯᒪᔪᓂᒃ, ᐃᖏᕐᕋᓂᐅᑉ ᓇᓗᓇᐃᖅᓯᒪᓂᖏᓐᓂᓪᓘᓐᓃᑦ ᑐᓂᓯᙱᑦᑐᖅ ᖃᐅᔨᓴᕐᑎᓄᑦ.
ᓄᖅᑲᕐᕕᐃᑦ, ᐃᓂᐅᔪᑦ, ᐃᖏᕐᕋᓃᓪᓗ ᐸᐸᑦᑕᐅᓯᒪᔪᑦ ᑕᒪᑐᒪᓂ ᖃᕆᓴᐅᔭᒥ ᑭᓯᐊᓂ ᐱᑕᖃᖅᐳᑦ. Otranspo-ᒧᑦ ᐊᑐᖅᑎᐅᓂᕐᒧᑦ ᐊᐅᓪᓚᖅᑎᑕᐅᙱᑦᑐᑦ.
ᑭᓇᑐᐃᓐᓇᖅ ᐅᓂᒃᑳᓕᐅᕈᓐᓇᖅᑐᖅ ᐊᐅᓚᑦᑎᓂᕐᒧᑦ, ᐊᓯᖏᓐᓄᑦ ᑕᑯᔭᐅᓇᔭᙱᑦᑐᒥᒃ. ᐊᑎᖃᕐᕕᖕᒥᒃ ᓴᓇᔭᕆᐊᖃᙱᑦᑐᖅ. ᐊᑎᖃᙱᑦᑐᑦ ᐅᓂᒃᑳᖏᑦ ᐱᒻᒪᕆᐅᓂᖅᓴᐅᙱᑦᑐᑦ ᐊᑎᖃᕐᕕᖕᒧᑦ ᑲᑎᑎᑕᐅᓯᒪᔪᓂᑦ. ᑐᓂᓯᔪᖅ ᐱᔪᖅ ᐃᒻᒥᓂᒃ ᓇᓗᓇᐃᖅᓯᔾᔪᑎᒥᒃ. ᐅᓂᒃᑳᑦ ᕿᒥᕐᕈᔭᐅᔪᑦ ᓴᖅᑭᑕᐅᓚᐅᖅᑎᓐᓇᒋᑦ. ᐊᒥᓱᐊᓗᐃᑦ ᑲᑎᑕᐅᒃᐸᑕ ᑕᐃᒪ ᓴᖅᑭᑕᐅᔪᓐᓇᖅᑐᑦ. ᑭᖑᓂᐊᒍᑦ ᐃᓯᕈᕕᑦ ᐊᑎᖃᕐᕕᖕᒧᑦ, ᓯᕗᓪᓕᖅ ᐅᓂᒃᑳᕆᔭᐃᑦ ᑲᑎᑎᑕᐅᓂᐊᙱᑦᑐᖅ ᓇᓗᓇᐃᖅᑕᐅᙱᖦᖢᓂ.
ᐃᓄᒋᓐᓂᖓᓂᒃ ᐅᓂᒃᑳᖅᑐᖃᕋᐃ, ᓇᐅᓐᓂᖓ ᓇᓗᓇᐃᖅᓯᒪᔪᖅ ᐊᑐᖅᑕᐅᓪᓗᓂ ᑐᖁᔭᐅᙱᑦᑐᖅ. ᑐᖁᔭᐅᔪᑦ ᑕᒪᒃᑯᐊ ᑭᓯᐊᓂ: ᐃᖏᕐᕋᑦᑎᑦ ᓇᓗᓇᐃᖅᑕᐅᔪᖅ, ᐃᓄᒋᓐᓂᖓ ᐅᓂᒃᑳᖅᑕᐅᔪᖅ, ᓇᓗᓇᐃᒃᑯᑕᐃᑦ ᒥᑭᔪᑦ, ᕿᒥᕐᕈᐊᕐᓂᕐᒧᓪᓗ ᐱᔭᕆᐊᖃᖅᑐᑦ.
Anyone may send a private contact or website-support message. The message and optional reproduction steps are encrypted. An email address is collected only when the sender asks for a reply and gives explicit consent; the message is never treated as evidence of a transit incident or published.
ᓈᓴᐃᓂᖅ ᐊᒻᒪ ᑯᑭᓯ
Essential session, language, security, and offline storage support requested features. Usage analytics is on by default, to help us improve the site. You can turn it off in one tap, and we turn it off automatically if your browser sends Global Privacy Control or Do Not Track. Transit tools remain usable when analytics is off.
Otranspo counts visits with its own counter, built into the site. It sets no cookie and stores no internet address, browser description, or identifier of any kind. For each page view it records only: the type of page, a coarse category address without detailed identifiers or query strings, the language, the website that sent the visit (its name only, such as google.com), a campaign tag if the link carried one, whether the screen is phone, tablet, or desktop size, and the country (with the province inside Canada) given by the hosting network. Each view only adds one to that day’s totals; no record of a single view is kept, and the totals are deleted after 400 days. Rider tasks such as planning a trip or sharing a page are counted the same way, by name only. Tools, service tabs and transitions between coarse sections also add to daily totals, without an identifier or individual journey. Search and trip values are never sent. Campaign tags are removed from the address bar once read. A browser marker for the current tab, which is never sent, stops a reload being counted as a new arrival. Browsers sending Global Privacy Control or Do Not Track are not counted at all.
Cloudflare Web Analytics ᐊᒻᒪᓗ ᓈᓴᐃᓲᖅ ᐃᓕᑕᕐᓂᐊᖅᑕᐅᓂᖏᓐᓂᒃ, ᓯᓚᑖᓂᑦ ᕿᒥᕐᕈᐊᖅᑎᐅᓪᓗᓂ. ᑯᑭᒥᒃ ᐃᓕᓯᓲᖑᙱᑦᑐᖅ. ᖃᕆᑕᐅᔭᒃᑯᑦ ᓇᓂᓯᔾᔪᑎᒥ ᐃᓗᓯᐊᓂᒃ ᑕᐅᑐᒃᓯᓲᖑᙱᑦᑐᖅ. ᐅᖃᓕᒫᖅᑎᒥᒃ ᓇᓗᓇᐃᖅᓯᓲᖑᙱᑦᑐᖅ. ᒪᑉᐱᒐᖓᑕ ᑐᕌᕈᑎᖓᓂᒃ ᑎᑎᕋᖅᓯᓲᖅ, ᐊᐱᖅᓱᕈᑎᖏᑦ ᐃᓚᐅᑎᙱᓪᓗᒋᑦ. ᐊᐅᓪᓚᕐᓂᕐᒧᑦ ᕿᓂᕐᓂᑦ, ᓇᓃᑦᑑᓂᕐᒧᑦ ᓈᓴᐅᑏᑦ, ᐊᒻᒪ ᐊᐅᓪᓚᕐᓂᕐᒧᑦ ᐸᕐᓇᐅᑏᑦ ᓈᓴᐅᓯᐊᓄᑦ ᐃᓚᐅᓯᒪᓇᔭᙱᑦᑐᑦ.
Google Analytics is on unless you turn analytics off, and never loads under a browser privacy signal. It measures coarse public page categories and may use analytics cookies, which are removed when you turn it off. Private pages, detailed identifiers, searches, trip endpoints and query strings are excluded. PostHog counts reviewed actions with a shared aggregate identifier, without session recording or individual rider profiles. Vendor requests reach Google and PostHog; they are not described as completely anonymous. These totals are measurements, not a verified count of people.
ᐱᔨᑦᑎᕋᐅᑎ ᓂᐅᕕᖅᑎᑦᑎᖏᑦᑐᖅ ᐃᖅᑲᖅᑐᐃᕝᕕᓂᒃ ᐊᑐᖅᑎᓄᑦ ᑐᓴᒐᒃᓴᓂᒃ. ᐊᑖᓂ ᑕᑕᑎᖅᑕᐅᓯᒪᔪᑦ ᑐᓂᔭᐅᕙᒃᑐᑦ ᑐᓴᒐᒃᓴᓂᒃ ᒫᓐᓇᐅᔪᒥ ᐱᓕᕆᐊᒥ. ᐅᖃᐅᓯᐅᔪᑦ: ᓱᓇᒧᑦ, ᖃᖓ, ᓱᓇ ᑐᓴᒐᒃᓴᖅ, ᐊᒻᒪ ᖃᓄᑎᒋ ᐊᑯᓂᐅᑎᒋ ᐱᑦᑎᐊᖅᑕᐅᓂᐊᖅᑐᑦ. ᐱᔭᕆᐊᖃᖏᑦᑐᑦ ᑐᓂᔭᐅᕙᒃᑐᑦ ᓱᓇᒥᒃ ᐱᔪᓐᓇᖏᑦᑐᑦ ᐅᖃᐅᓯᐅᔪᖅ ᐱᓕᕆᐊᖅ ᓴᖅᑭᓚᐅᖏᓐᓇᒃᐸᑦ.
Google Maps: ᐃᖏᕐᕋᔾᔪᑏᑦ ᐊᔾᔨᒌᙱᑦᑐᑦ ᐊᔾᔨᒋᔭᐅᓂᖏᑦ (ᐱᔭᕆᐊᖃᙱᑦᑐᖅ)
Only when a rider explicitly requests the comparison, Otranspo sends the confirmed coordinates and departure intent to Google Maps Routes to calculate driving, walking, and cycling. Place labels, saved-place names, transit itineraries, account details, and reports are not included.
The comparison response is transient and is not stored or placed in browser history by Otranspo. Core transit planning works without this comparison. Google processes the request under its own terms and privacy policy.
ᑕᑯᓂᖅ, ᐊᓯᒧᑦ ᐊᐅᓪᓚᑎᑦᑎᓂᖅ, ᓈᒻᒪᑦᑎᓂᖅ, ᓄᖅᑲᖓᑎᑦᑎᓂᖅ, ᐲᖅᓯᓂᕐᓗ
Signed-in riders can use the authenticated privacy endpoints to export or delete account-linked Otranspo records. A deletion request preserves only legally or operationally required audit evidence in de-identified form.
An anonymous report or contact sender receives a private receipt capability. Use that receipt with the authorized privacy contact for an access, correction, withdrawal, or deletion request; it is not a public sharing link.
Do not place sensitive journey or safety information in a general contact message. Use the authorized privacy contact shown on the contact page for a rights request.
ᑐᖅᑯᐃᓯᒪᓂᖅ
ᐃᓄᐃᑦ ᑐᓂᓯᒪᔭᖏᑦ ᐅᖃᐅᓯᖏᑦ ᑕᑯᔭᐅᔪᓐᓇᙱᑦᑐᑦ ᐸᐸᑦᑕᐅᔪᓐᓇᖅᑐᑦ 365 ᐅᓪᓗᓄᑦ. ᐊᑯᓂᐅᓂᖅᓴᐅᔪᓐᓇᖅᑐᑦ ᐊᓪᓚᓯᒪᒍᑎᒃ, ᐊᑦᑕᕐᓇᙱᑦᑐᓕᕆᓂᕐᒧᑦ ᕿᒥᕐᕈᓂᖅ, ᐊᐱᕆᓂᖅ, ᐅᕝᕙᓘᓐᓃᑦ ᐱᖁᔭᓕᕆᓂᕐᒧᑦ ᐸᐸᑦᑎᓂᖅ ᐱᔭᕆᐊᖃᖅᐸᑦ. ᓱᕋᑦᑎᓂᕐᒧᑦ ᓴᐳᔾᔨᔾᔪᑎᑦ ᐊᓪᓚᒍᑏᑦ ᐲᔭᖅᑕᐅᓂᐊᖅᑐᑦ 24 ᐃᑲᕐᕋᐅᓕᕌᖓᑕ. ᐱᔨᑦᓯᕋᐅᑎᓄᑦ ᑕᑯᔭᐅᓯᒪᔪᑦ ᐃᖏᕐᕋᔪᓄᑦ ᐊᓪᓚᒍᑎᐅᙱᑦᑐᑦ.
ᑐᓴᐅᑎᒋᓂᖅ ᐃᓗᓕᖅᑯᓯᐅᔪᖅ ᒪᑐᐃᖓᓂᐊᖅᑐᖅ ᕿᒥᕐᕈᔭᐅᓂᖓᓂ. ᐱᔭᕇᖅᑕᐅᒃᐸᑦ, ᒪᑐᔭᐅᒃᐸᑦ, ᐱᔪᒪᔭᐅᙱᑦᑐᖅ ᑐᓴᐅᑎᐅᒃᐸᑦ, ᐅᕝᕙᓘᓐᓃᑦ ᑕᒻᒪᖅᓯᒪᓗᓂ ᑐᓂᔭᐅᒃᐸᑦ, ᐲᔭᖅᑕᐅᓂᐊᖅᑐᖅ 365 ᐅᓪᓗᐃᑦ ᖄᖏᕐᒪᑕ. ᐃᓯᕐᕕᖕᒧᑦ ᐊᑦᑕᑦᑎᓯᒪᔪᑦ ᑐᓴᐅᑎᒋᓂᐅᔪᑦ ᐲᔭᖅᑕᐅᓂᐊᖅᐳᑦ ᐊᒻᒪᓗ ᐃᓯᕐᕕᐃᑦ ᐲᔭᖅᑕᐅᒃᐸᑦ ᓇᓗᓇᐃᖅᓯᓚᐅᖅᖢᑎᑦ.
ᖃᕆᓴᐅᔭᕐᒥ ᑐᖁᔭᐅᓯᒪᔪᑦ ᑕᐃᒪᐃᓐᓇᐅᓂᐊᖅᐳᑦ ᐃᖏᕐᕋᔪᖅ ᐲᔭᐃᓇᔭᖅᑎᓪᓗᒋᑦ, ᐅᕝᕙᓘᓐᓃᑦ ᖃᕆᓴᐅᔭᖅ ᐲᔭᐃᓇᔭᖅᑎᓪᓗᒋᑦ.
ᐃᑭᔪᑦ ᑐᓴᒐᒃᓴᖏᑦ ᓇᒧᙵᐅᔪᓐᓇᕐᒪᖔᑕ
ᐊᑐᓂ ᐊᓪᓚᒃᑲᓐᓂ ᑕᑯᒃᓴᐅᑎᑦᑎᕗᖅ: ᑭᓇ ᐱᓂᐊᕐᒪᖔᑦ, ᓱᒥᒃ ᐱᔾᔪᑎᖃᕐᒪᖔᑦ, ᓱᓇ ᑐᓂᓯᓂᕐᒥᒃ ᐱᒋᐊᖅᑎᑦᑎᒪᖔᑦ, ᓱᓇ ᐊᐅᓪᓚᖅᑎᑕᐅᔪᓐᓇᕐᒪᖔᑦ. ᑕᑯᒃᓴᐅᑎᑦᑎᕗᖅ ᖃᑦᓯᓂ ᐅᓪᓗᓂ ᐱᑕᖃᕐᓂᐊᕐᒪᖔᑦ, Otranspo ᒪᓕᒃᑎᑦᑎᔪᓐᓇᖅᑕᖓ ᓱᓕᔪᒥᒃ ᐅᖃᐅᓯᖃᕈᓐᓇᖅᑕᖓᓗ. ᐊᓪᓚᒃᑲᐃᑦ ᐃᓛᓐᓂ ᐊᑐᖅᑕᐅᔪᑦ ᑕᑯᑎᑦᑎᙱᑦᑐᑦ ᒫᓐᓇ ᐊᑐᖅᑕᐅᓂᖏᓐᓂᒃ.
Otranspo ᓂᐅᕕᖅᑎᑦᑎᙱᑦᑐᖅ ᐃᖏᕐᕋᔪᑦ ᑐᓴᒐᒃᓴᖏᓐᓂᒃ. ᓴᓇᙱᑦᑐᖅ ᓂᐅᕕᖅᑎᑦᑎᓂᕐᒧᑦ ᑐᓴᒐᒃᓴᓂᒃ. ᐊᓯᖏᓐᓄᑦ ᐱᔪᓐᓇᐅᑎᑦᑎᙱᑦᑐᖅ ᑕᑯᔭᐅᔾᔮᙱᑦᑐᒥᒃ ᐅᓂᒃᑳᒥᒃ ᑭᓇᑐᐃᓐᓇᐅᑉ ᑕᑯᔪᓐᓇᖅᑕᖓᓂᒃ ᐱᓕᕆᓂᕐᒧᑦ.
Vercel
ᐊᐅᓚᔪᖅ ᒫᓐᓇ- ᑐᕌᒐᖅ
- Otranspo ᖃᕆᑕᐅᔭᒃᑯᑦ ᑐᑭᓯᒋᐊᕐᕕᖓ ᐊᒻᒪ API ᐊᑐᐃᓐᓇᐅᑎᓪᓗᒋᑦ. ᑐᒃᓯᕋᐅᑎᑦ ᐊᐅᓚᓪᓗᒋᑦ. ᓴᐳᔾᔨᓂᖅ ᐊᒻᒪ ᐊᑐᐃᓐᓇᐅᓂᖅ ᐊᐅᓚᓪᓗᒋᑦ.
- ᐱᑕᖃᓕᕌᖓᑦ
- ᖃᖓᑐᐃᓐᓇᖅ ᖃᕆᑕᐅᔭᒃᑯᑦ ᕿᓂᕈᑎ ᑐᒃᓯᕋᕐᐸᑦ Otranspo ᒪᑉᐱᒐᖓᓂᒃ, ᐊᑐᕈᑎᖓᓂᒃ, ᐅᕝᕙᓘᓐᓃᑦ API ᐱᓕᕆᐊᖓᓂᒃ.
- ᑐᑭᓯᒋᐊᕈᑎᑦ ᐊᐅᓪᓚᖅᑎᑕᐅᔪᑦ
- The requested URL, network and browser request metadata, and the body of an API request when a rider submits one. Otranspo strips query strings before analytics, but the hosting request still has to reach the requested URL.
- ᑐᖁᓯᒪᓂᖓᑕ ᑭᓪᓕᖓ
- Otranspo ᐃᖏᕐᕋᔪᑦ ᑎᑎᕋᖅᓯᒪᔭᖏᓐᓂᒃ ᐱᑕᖃᐃᓐᓇᖅᑎᑦᑎᓲᖅ ᐅᓪᓗᓂ ᐊᑖᓂ ᑎᑎᕋᖅᓯᒪᔪᓂ ᑭᓯᐊᓂ. ᐊᑐᐃᓐᓇᐅᑎᑦᑎᔨᐅᑉ ᓴᐳᔾᔨᓂᕐᒧᑦ ᐊᐱᕆᓂᕐᒧᓪᓗ ᑎᑎᕋᖅᓯᒪᔭᖏᑦ ᒪᓕᒃᐳᑦ ᖃᕆᓴᐅᔭᒃᑯᑦ ᐊᑐᐊᒐᓂᒃ. ᐃᖏᕐᕋᔪᑦ ᐊᑐᖅᓯᒪᔭᖏᓐᓂᒃ ᑎᑎᕋᖅᓯᒪᔪᐃᑦ.
Supabase
ᐊᐅᓚᔪᖅ ᒫᓐᓇ- ᑐᕌᒐᖅ
- Host Otranspo’s PostgreSQL records and provide optional account authentication.
- ᐱᑕᖃᓕᕌᖓᑦ
- ᑐᑭᓯᒋᐊᕈᑎᑦ ᑐᖁᔭᐅᔪᑦ ᐅᖃᓕᒫᖅᑕᐅᓂᐊᕐᒪᑕ ᐅᕝᕙᓘᓐᓃᑦ ᑎᑎᕋᖅᑕᐅᓂᐊᕐᒪᑕ. ᐅᕝᕙᓘᓐᓃᑦ ᐊᐅᓚᔪᖅ ᐃᓯᕈᒪᓂᐊᕐᒪᑦ.
- ᑐᑭᓯᒋᐊᕈᑎᑦ ᐊᐅᓪᓚᖅᑎᑕᐅᔪᑦ
- Otranspo ᑎᑎᕋᖅᓯᒪᔪᖏᑦ, ᐊᑐᖅᑕᐅᔪᑦ ᑐᕌᒐᖓᓄᑦ ᑭᓯᐊᓂ. ᐃᓯᕐᓂᕐᒧᑦ: ᐊᑐᖅᑎᐅᑉ ᓇᓗᓇᐃᒃᑯᑕᖓ, email ᐊᒻᒪ ᐃᓯᖅᓯᒪᓂᕐᒧᑦ ᑎᑎᕋᖅᓯᒪᔪᑦ. ᑖᒃᑯᐊ ᑐᖅᓯᒪᑎᑕᐅᔪᑦ ᐊᑐᖃᑎᒌᒃᑐᓂ ᓇᓗᓇᐃᖅᓯᔨᒃᑯᓐᓂ. ᐃᒻᒥᓄᑦ ᐃᖏᕐᕋᓂᖅ ᐊᔾᔨᓕᐅᖅᑕᐅᓇᔭᙱᑦᑐᖅ ᐃᖏᕐᕋᔪᖅ ᐃᓯᕐᒪᑦ ᑭᓯᐊᓂ.
- ᑐᖁᓯᒪᓂᖓᑕ ᑭᓪᓕᖓ
- ᐃᑭᐊᖅᑭᕕᒃᑯᑦ ᑕᑯᒃᓴᐅᑎᒥ ᐱᓯᒪᔪᑦ ᓇᔪᒐᐃᑦ ᐊᒻᒪ ᒫᓐᓇᓴᐅᔪᑦ ᐃᖏᕐᕋᓂᐅᓯᒪᔪᑦ ᑐᖁᓯᒪᔪᑦ ᑕᑯᒃᓴᐅᑎᒥ ᑭᓯᐊᓂ. ᓴᖅᑭᑕᐅᙱᑦᑐᑦ ᐅᖃᐅᓯᐅᔪᑦ ᐊᒻᒪ ᐅᓪᓗᐃᔭᖅᑕᐅᓯᒪᔪᑦ ᐅᖃᓪᓚᒍᓯᐅᔪᑦ ᐲᔭᖅᑕᐅᓂᐊᖅᑐᑦ 365 ᐅᓪᓘᑉ ᑭᖑᓂᐊᒍᑦ. ᐱᐅᙱᑦᑐᒥᒃ ᐊᑐᐃᓂᐅᔪᑦ ᐊᒻᒪ ᐊᑕᐅᓯᐊᖅ ᐱᓕᕆᓂᐅᔪᑦ ᑎᑎᖅᑲᐃᑦ ᐲᔭᖅᑕᐅᓂᐊᖅᑐᑦ 24 ᐃᑲᕐᕋᐃᑦ ᑭᖑᓂᐊᒍᑦ. ᐊᑐᖃᑎᒌᒃᑐᑦ ᐃᓄᐅᓂᖏᑦ, ᐅᕝᕙᓘᓐᓃᑦ ᑮᓇᐅᔭᓂᒃ ᐱᖁᔭᓂᒃ ᐱᔾᔪᑎᖃᖅᑐᑦ, ᑎᑎᕋᖅᓯᒪᓂᐊᖅᑐᑦ ᐲᔭᐃᓂᐅᑉ ᑐᓴᒐᒃᓴᖓᓂ.
Cloudflare Web Analytics
ᐊᐅᓚᔪᖅ ᒫᓐᓇ- ᑐᕌᒐᖅ
- ᓯᓚᑖᓂ ᓇᓗᓇᐃᖅᓯᓂᖅ Otranspo-ᐅᑉ ᓈᓴᐅᑎᖓᓄᑦ ᐳᓛᕆᐊᖅᑐᓂᒃ. ᑯᑭᓂᒃ ᐊᑐᕋᓂ. ᐃᖏᕐᕋᔪᒥᒃ ᓇᓗᓇᐃᖅᓯᕋᓂ.
- ᐱᑕᖃᓕᕌᖓᑦ
- ᖃᖓᓕᒫᖅ ᒪᑉᐱᒐᖅ ᑕᑯᒐᕕᐅᒃ.
- ᑐᑭᓯᒋᐊᕈᑎᑦ ᐊᐅᓪᓚᖅᑎᑕᐅᔪᑦ
- A page address without its query string plus the limited network and browser facts used by Cloudflare’s cookieless measurement. Search terms, coordinates, itinerary details, form text, and saved places are excluded.
- ᑐᖁᓯᒪᓂᖓᑕ ᑭᓪᓕᖓ
- Otranspo ᐱᑕᖃᖅᑎᑕᐅᔪᖅ ᑕᑯᔨᐅᔪᑦ ᑲᑎᑕᐅᓯᒪᔪᑦ ᓈᓴᐅᑎᖏᓐᓂᒃ ᑭᓯᐊᓂ. Otranspo ᓴᓇᓐᖏᑦᑐᖅ ᑎᑎᕋᖅᓯᒪᔪᓂᒃ ᐃᓄᑐᐃᓐᓇᕐᒧᑦ ᑖᔅᓱᒪ ᓈᓴᐅᑎᐅᑉ ᐱᔾᔪᑎᒋᓗᒍ.
Upstash (Otranspo ᐳᓛᕆᐊᖅᑐᑦ ᑭᓯᑦᑐᑦ ᑲᑎᑕᐅᓯᒪᔪᑦ)
ᐊᐅᓚᔪᖅ ᒫᓐᓇ- ᑐᕌᒐᖅ
- Otranspo ᓈᓴᐅᑎᖓᑕ ᐅᓪᓗᑕᒫᑦ ᑲᑎᓪᓗᒋᑦ ᓈᓴᐅᑎᖏᑦ ᑐᖁᔭᐅᓂᐊᖅᑐᑦ. ᑖᓐᓇ ᐳᓛᕆᐊᖅᑐᓂᒃ ᓈᓴᐅᑎ ᑯᑭᓂᒃ ᐊᑐᙱᑦᑐᖅ.
- ᐱᑕᖃᓕᕌᖓᑦ
- On each page view or finished rider task, except in browsers sending Global Privacy Control or Do Not Track.
- ᑐᑭᓯᒋᐊᕈᑎᑦ ᐊᐅᓪᓚᖅᑎᑕᐅᔪᑦ
- ᑖᒃᑯᐊ ᑭᓯᐊᓂ ᑭᓯᑦᑕᐅᔪᑦ: ᒪᑉᐱᒐᐅᑉ ᖃᓄᐃᓘᓂᖓ, ᒪᑉᐱᒐᐅᑉ ᓇᐃᓴᖓ ᐊᐱᖅᑯᑎᖃᙱᑦᑐᖅ, ᐅᖃᐅᓯᖅ, ᓇᑭᙶᕐᓂᖓ ᖃᕆᑕᐅᔭᒃᑯᑦ, ᐱᓇᓱᐊᕈᓯᐅᑉ ᓇᓗᓇᐃᖅᑯᑎᖓ, ᖃᕆᑕᐅᔭᐅᑉ ᐊᖏᓂᖓ, ᓄᓇ ᑲᓇᑕᒥᐅᑦ ᐱᕕᓐᔅᓯᖓ, ᐃᖃᔪᖅᑐᐃᔩᑦ ᐱᓇᓱᐊᕈᓯᖏᑦ ᐊᑎᖏᑦ. ᖃᕆᑕᐅᔭᒃᑯᑦ ᓇᐃᓴᖓ, ᖃᕆᑕᐅᔭᒃᑯᑦ ᕿᓂᕈᑎᐅᑉ ᓇᓗᓇᐃᖅᑕᐅᓂᖓ, ᑯᑭ ᐅᕝᕙᓘᓐᓃᑦ ᓇᓗᓇᐃᖅᑯᑎ ᑐᓂᔭᐅᙱᑦᑐᑦ.
- ᑐᖁᓯᒪᓂᖓᑕ ᑭᓪᓕᖓ
- ᐅᓪᓗᑕᒫᖅ ᑭᓯᑦᑎᕐᓂᖅ ᑕᐃᒪᓐᓇ. ᐲᖅᑕᐅᓂᐊᖅᑐᑦ 400 ᐅᓪᓗᐃᑦ ᖄᖏᖅᐸᑕ. ᒪᑉᐱᒐᖅ ᐊᑕᐅᓯᕐᒥᒃ ᑕᑯᓂᖅ ᑎᑎᕋᖅᑕᐅᙱᑦᑐᖅ.
Google Analytics
- ᑐᕌᒐᖅ
- ᑕᑯᔭᐅᔪᓐᓇᖅᑐᑦ ᒪᑉᐱᒐᐃᑦ ᑭᓯᑦᑕᐅᓂᐊᖅᑐᑦ ᐊᖏᔪᓂᒃ ᖃᓄᐃᓕᖓᓂᖏᓐᓄᑦ. ᓂᐅᕕᐊᒃᓴᓂᒃ ᓴᖅᑭᑎᑦᑎᓂᖅ ᐱᔭᐅᓯᒪᔪᖅ.
- ᐱᑕᖃᓕᕌᖓᑦ
- Enabled by default after the site notice is shown, unless the rider has refused analytics or Do Not Track or Global Privacy Control is active. Private pages are excluded.
- ᑐᑭᓯᒋᐊᕈᑎᑦ ᐊᐅᓪᓚᖅᑎᑕᐅᔪᑦ
- ᑭᓇᑐᐃᓐᓇᐅᑉ ᑕᑯᔭᒃᓴᖓᑕ ᖃᓄᐃᑦᑑᓂᖓ ᐊᑎᖓᓗ. ᓇᑭᙶᕐᒪᖔᑦ ᑕᑯᔭᖅᑐᖅ. ᖃᓄᖅ ᐊᑐᖅᑕᐅᓂᖓ. Google analytics cookie ᖃᕆᑕᐅᔭᒃᑯᓪᓗ ᑐᓴᒐᒃᓴᐃᑦ. ᐃᓚᓕᐅᔾᔨᔭᐅᖏᑦᑐᑦ: ᑕᑯᔭᐅᓯᒪᔪᑦ ᐃᓗᓕᖏᑦ, ᕿᓂᕐᓂᐅᔪᑦ, ᓇᓃᓐᓂᖓ ᓈᓴᐅᑎᖏᑦ, ᐃᖏᕐᕋᓂᕐᒧᑦ ᐸᕐᓇᐅᑏᑦ, ᑎᑎᕋᖅᑕᐅᓯᒪᔪᓪᓗ.
- ᑐᖁᓯᒪᓂᖓᑕ ᑭᓪᓕᖓ
- Withdrawing consent stops new measurement and removes Otranspo-visible Google Analytics browser identifiers. Provider-held events remain subject to the configured analytics property and Google’s policy.
PostHog
- ᑐᕌᒐᖅ
- ᓈᓴᐃᓗᑎᒃ ᒥᑭᔪᓂᒃ ᓇᓗᓇᐃᖅᑕᐅᓯᒪᔪᓂᒃ ᐃᓚᖏᓐᓂᒃ. ᑖᓐᓇ Otranspo ᓇᓂᓯᓂᐊᕐᒪᑦ ᓇᓃ ᐃᖏᕐᕋᔪᑦ ᐊᔪᕈᓐᓃᖅᑐᑦ.
- ᐱᑕᖃᓕᕌᖓᑦ
- Enabled by default when the governed aggregate-only configuration is available, unless the rider has refused analytics or a browser privacy signal is active.
- ᑐᑭᓯᒋᐊᕈᑎᑦ ᐊᐅᓪᓚᖅᑎᑕᐅᔪᑦ
- ᖃᐅᔨᓴᖅᑕᐅᓯᒪᔪᑦ ᐱᓂᐊᕐᓂᐅᑉ ᐊᑎᖏᑦ ᐊᒻᒪ ᑕᐃᒪᐃᓐᓇᖅ ᑐᑭᓯᒋᐊᕈᑎᑦ. ᐆᑦᑐᕋᐅᑎᒋᓗᒋᑦ: ᐅᖃᐅᓯᖅ, ᓴᖅᑭᔮᕐᕕᐅᑉ ᐊᖏᓂᖓ, ᖃᓄᖅ ᑎᑎᕋᕐᓂᖅ, ᐃᑭᐊᖅᑭᕕᒃᑯᑦ ᑲᓱᖅᓯᒪᓂᖅ, ᐊᒻᒪ ᐃᖏᕐᕋᔪᖅ ᐱᓂᐊᕐᓂᖓᑕ ᑲᔪᓯᓂᖓ. ᐊᑐᖅᑕᐅᙱᑦᑐᑦ: ᓇᒻᒥᓂᖅ ᑎᑎᕋᖅᑕᐅᓂᖏᑦ, ᓴᖅᑭᔮᕐᕕᐅᑉ ᐊᐅᓚᓂᖓᓂ ᑎᑎᕋᖅᑕᐅᓂᖏᑦ, ᐃᓅᔪᓂᑦ ᑎᑎᕋᖅᑕᐅᔪᑦ, ᓇᐅᓐᓂᓪᓚᑦᑖᖓ, ᐊᒻᒪ ᐃᓅᔪᑦ ᐃᖏᕐᕋᓂᖏᑕ ᐅᓂᒃᑳᖏᑦ.
- ᑐᖁᓯᒪᓂᖓᑕ ᑭᓪᓕᖓ
- ᐱᓯᒪᔪᑦ ᐊᑐᖃᑎᒌᖕᓂᒃ ᓇᓗᓇᐃᒃᑯᑕᖃᖅᐳᑦ. ᐃᖏᕐᕋᔪᖅ ᐃᓄᒃ ᓇᓗᓇᐃᖅᑕᐅᙱᑦᑐᖅ. ᐊᐱᕆᓂᐅᔪᑦ ᑎᑭᑦᑐᐃᓐᓇᐅᔪᑦ ᐱᔨᑦᑎᖅᑎᒧᑦ. ᐅᖃᐅᓯᐅᙱᑦᑐᑦ ᐃᓘᓐᓇᑎᒃ ᐊᑎᖃᙱᑦᑑᓂᖏᓐᓂᒃ. PostHog ᐱᓯᒪᔪᓂᒃ ᑐᖁᓯᒪᔪᖅ ᐊᕐᕌᒍᒥ ᐊᑕᐅᓯᕐᒥ. ᑖᓐᓇ ᐊᓯᔾᔨᖅᑕᐅᔪᓐᓇᙱᑦᑐᖅ ᐊᑭᓕᖅᓱᐃᓂᕐᒧᑦ ᐊᑐᐊᒐᖓᓂ. ᖃᐅᔨᓴᕐᓂᖅ ᓄᖅᑲᖅᑎᖦᖢᒍ, ᓄᑖᑦ ᐱᓯᒪᔪᑦ ᓄᖅᑲᖅᐳᑦ. ᐃᖏᕐᕋᔪᑦ ᐊᑐᐃᓐᓇᐅᔪᓂᒃ ᐊᑐᖃᑦᑕᕐᓂᐊᖅᐳᑦ.
Google Maps Routes
- ᑐᕌᒐᖅ
- ᐱᔪᒪᒍᕕᑦ, ᐊᐅᓚᑦᑎᓂᖅ, ᐱᓱᒃᓂᖅ ᐊᒻᒪ ᐸᐃᓯᑯᓪᒧᑦ ᐊᐅᓚᓂᖅ ᐊᔾᔨᒌᙱᓐᓂᖏᑦ ᓈᓴᕐᓗᒋᑦ.
- ᐱᑕᖃᓕᕌᖓᑦ
- ᐊᑐᖅᑎ ᓇᓗᓇᐃᖅᑐᒥᒃ ᐊᐱᕆᓂᕐᒥᓂ ᑭᓯᐊᓂ, ᐃᖏᕐᕋᔾᔪᑎᑦ ᐊᔾᔨᒋᙱᑦᑐᑦ ᓇᓗᓇᐃᖅᑕᐅᖁᓪᓗᒋᑦ.
- ᑐᑭᓯᒋᐊᕈᑎᑦ ᐊᐅᓪᓚᖅᑎᑕᐅᔪᑦ
- ᐊᐅᓪᓚᕐᕕᒃ ᑎᑭᑦᑕᒃᓴᕐᓗ ᓇᔪᕐᕕᖏᑦ ᓇᓗᓇᐃᖅᑕᐅᓯᒪᔪᑦ, ᐊᒻᒪ ᐊᐅᓪᓚᕈᒪᓂᖅ. ᐃᓂᑦ ᐊᑏᑦ, ᐱᑐᖅᑕᐅᓯᒪᔪᑦ ᐃᓂᑦ ᐊᑏᑦ, ᐃᖏᕐᕋᓂᕐᒧᑦ ᐸᕐᓇᐅᑏᑦ, ᓇᖕᒥᓂᖅ ᑐᓴᒐᒃᓴᑦ, ᐅᓂᒃᑳᓪᓗ ᐃᓚᐅᙱᑦᑐᑦ.
- ᑐᖁᓯᒪᓂᖓᑕ ᑭᓪᓕᖓ
- Otranspo treats the response as transient and does not store it or add it to recent trip history. Google processes the request under its own terms and privacy policy.
OpenStreetMap Standard, ᓄᓇᙳᐊᖅ ᒫᓐᓇ ᐊᑐᖅᑕᐅᔪᖅ
ᐊᐅᓚᔪᖅ ᒫᓐᓇ- ᑐᕌᒐᖅ
- ᓄᓇᙳᐊᖅ ᓴᓇᓗᒍ ᓄᖅᑲᕐᕕᐃᑦ, ᐃᖏᕐᕋᔾᔪᑏᑦ, ᐊᖁᑏᓪᓗ ᑐᓄᐊᓐᓂ. ᓄᓇᙳᐊᖅ ᐊᑐᕈᓐᓇᖅᑕᐃᑦ.
- ᐱᑕᖃᓕᕌᖓᑦ
- ᐃᖏᕐᕋᔪᖅ ᐅᒃᑯᐃᒃᐸᑦ ᓄᓇᙳᐊᒥᒃ ᐊᐅᓚᑕᐅᔪᓐᓇᖅᑐᒥᒃ.
- ᑐᑭᓯᒋᐊᕈᑎᑦ ᐊᐅᓪᓚᖅᑎᑕᐅᔪᑦ
- ᖃᕆᑕᐅᔭᒃᑯᑦ ᕿᓂᕈᑎ ᑐᖅᑐᐃᔪᖅ ᓄᓇᙳᐊᑉ ᐃᓚᖏᓐᓂᒃ ᑕᑯᔭᐅᔪᓂᒃ. ᐊᑐᖅᑕᐅᓲᓂᒃ ᖃᕆᑕᐅᔭᒃᑯᑦ ᑐᑭᓯᒋᐊᕈᑎᓂᒃ ᐱᓗᒍ. ᐃᒻᒥᓂᑦ ᐅᓂᒃᑳᑦ, ᐊᑐᖅᑎᐅᓂᕐᒧᑦ ᑎᑎᖅᑲᑦ, ᐊᒻᒪ ᓴᐳᒻᒥᔭᐅᔪᑦ ᐃᓂᐅᑉ ᐊᑎᖏᑦ ᑐᓂᔭᐅᙱᑦᑐᑦ.
- ᑐᖁᓯᒪᓂᖓᑕ ᑭᓪᓕᖓ
- Otranspo ᑐᖅᑯᐃᓐᓇᙱᑦᑐᖅ ᐃᖏᕐᕋᔪᐃᑦ ᓄᓇᙳᐊᖏᑦ ᑕᑯᔭᖏᓐᓂᒃ ᐱᔨᑦᑎᕋᐃᔨᒧᑦ. ᐱᔨᑦᑎᕋᐃᔨᐅᑉ ᑎᑎᕋᖅᓯᒪᔪᖏᑦ ᒪᓕᒃᐳᑦ ᐱᔨᑦᑎᕋᐃᔨᐅᑉ ᒪᓕᒐᖏᓐᓂᒃ.
Stripe
ᐊᐅᓚᔪᖅ ᒫᓐᓇ- ᑐᕌᒐᖅ
- Host an optional donation checkout and issue the processor’s payment receipt.
- ᐱᑕᖃᓕᕌᖓᑦ
- Only when a person chooses Continue to secure checkout on the donation page. Viewing rider information or the funding page sends nothing to Stripe.
- ᑐᑭᓯᒋᐊᕈᑎᑦ ᐊᐅᓪᓚᖅᑎᑕᐅᔪᑦ
- Donation amount and frequency, a private Otranspo donation reference, and the payment and receipt details entered directly on Stripe. Otranspo never receives or stores card or bank details.
- ᑐᖁᓯᒪᓂᖓᑕ ᑭᓪᓕᖓ
- Otranspo schedules minimum accounting, refund, dispute, and reconciliation records for deletion seven years and one day after their retention anchor. Optional encrypted donor contact details are erased after 400 days or earlier on request. Card and bank details remain with Stripe.
OC Transpo ᐅᕝᕙᓘᓐᓃᑦ STO
- ᑐᕌᒐᖅ
- Let a rider reach the official operator for fares, emergencies, accessibility help, complaints, or authoritative service decisions.
- ᐱᑕᖃᓕᕌᖓᑦ
- ᐃᖏᕐᕋᔪᖅ ᓇᓗᓇᐃᖅᓯᒪᔪᒥ ᐊᑕᔾᔪᑎᒥ ᓇᕐᓂᓯᒍᓂ ᓂᕈᐊᖅᓯᒪᔭᒥᓄᑦ ᐊᐅᓚᑦᑎᔨᒧᑦ ᑭᓯᐊᓂ.
- ᑐᑭᓯᒋᐊᕈᑎᑦ ᐊᐅᓪᓚᖅᑎᑕᐅᔪᑦ
- Otranspo ᐊᐅᓪᓚᖅᑎᑦᑎᙱᑦᑐᖅ ᐃᒻᒥᓂᒃ ᐱᓯᒪᔭᐅᔪᒥᒃ Otranspo ᐅᓂᒃᑳᒥᒃ. ᐊᓯᐊ ᖃᕆᑕᐅᔭᒃᑯᑦ ᐃᓂᖅ ᐱᔪᖅ ᐃᓕᖓᔪᒥᒃ ᑐᖓᓱᒃᑎᑦᑎᓂᕐᒥᒃ ᐃᓂᒧᑦ. ᐊᒻᒪ ᐱᔪᖅ ᐃᖏᕐᕋᔪᖅ ᑐᓂᓯᔪᒪᔭᖓᓂᒃ ᑕᐃᑲᓂ.
- ᑐᖁᓯᒪᓂᖓᑕ ᑭᓪᓕᖓ
- ᐊᐅᓚᑦᑎᔨ ᓂᕈᐊᖅᑕᐅᓯᒪᔪᖅ, ᑕᐃᑉᓱᒪ ᖃᕆᓴᐅᔭᒃᑯᑦ ᓇᑭᑦᑕᐅᕕᖓ ᐊᒻᒪ ᐅᖃᓗᐊᕐᓂᕐᒧᑦ ᐱᓕᕆᐊᖏᑦ ᒪᓕᒐᕆᔭᐅᓂᐊᖅᑐᑦ ᑐᓴᐅᒪᔾᔪᑎᓄᑦ ᑐᓂᔭᐅᔪᓄᑦ ᐃᓕᐊᕐᓂᖓᑕ ᑭᖑᓂᐊᓂ.
Your privacy controls
Before you export or delete
Four data scopes, four separate controls
A server download or deletion cannot reach every place where information may exist. Review each scope first so the result says exactly what changed and what still needs a separate action.
Deleting Otranspo records does not clear this browser, delete a shared sign-in identity, or cancel a monthly donation. Each needs its own action below.
This browser and device
Local to this deviceThese records stay in browser storage and remain usable without an account.
Inspect or clear this device’s dataDetails about this data and its limits
What this includes
- saved places and recent searches
- recent or active trips
- unfinished report and crowding drafts
- local notification inbox, map choices, language and rider preferences
- Export result
- They are not in the server export because the server cannot read them. Settings shows the local categories that this browser can inspect and clear.
- Deletion result
- Deleting Otranspo service records does not clear this browser. Clear the chosen local category in Settings on each device you used.
Otranspo service records
Controlled by the signed-in ownerThese are records in Otranspo’s database that are linked to the current account.
Go to the owner-only exportDetails about this data and its limits
What this includes
- private reports, contact cases and privacy requests
- route requests, votes, proposal support and crowding submissions
- account saves and merge history
- journey watches, recurring journeys, devices, consents, delivery history and access grants
- Export result
- The owner-only JSON download includes current account-linked records and identifies intentionally excluded secrets such as notification addresses and replaceable encrypted coordinates.
- Deletion result
- Permanent deletion removes each covered category inside one transaction and re-counts every category before claiming success. A short pseudonymous audit and replay-safe receipt remain under their stated limits.
Shared sign-in identity
Separate account-service recordThe account identifier, email, authentication methods and sessions belong to the shared Supabase identity service.
Ask for shared account removal stepsDetails about this data and its limits
What this includes
- account identifier and email
- password, passkey or configured sign-in method
- authentication sessions and security events
- Export result
- These records are not included in an Otranspo export. The export names the processor and the boundary instead of silently copying the identity into Otranspo.
- Deletion result
- Otranspo deletion does not delete the sign-in identity. Complete Otranspo deletion first if desired, then use the private privacy intake to request the account-service steps and learn which other service sessions may be affected.
Donation and payment records
Controlled by a private donation receiptStripe holds card or bank details. Otranspo holds only the minimum donation, accounting, refund, dispute and optional contact records described on the funding pages.
Open donation receipt and management helpDetails about this data and its limits
What this includes
- Stripe payment method and processor receipt
- donation amount, frequency and private Otranspo receipt
- optional encrypted contact details
- separate optional public-recognition choice
- Export result
- Donation records are receipt-scoped rather than joined to the Otranspo account export. Otranspo never exports card or bank details because it never receives them.
- Deletion result
- Otranspo account deletion does not cancel a monthly donation or erase records under financial retention. Use the private donation receipt to manage recurrence, erase optional contact details or remove public recognition.
Opening a linked control carries only the page address and the purpose named in the link. Otranspo does not merge browser, account, journey, report, donation, or payment records across services behind the scenes.
Consent register
Each optional use has its own decision
There is no single accept-all switch. Changing one choice affects only the purpose and records named in that row.
Optional analytics
Manage optional analytics- Applies to
- This browser
- How state is known
- Shown and changed directly below. Browser privacy signals keep it off.
- What changing it does
- Turning it off stops future optional collection, removes Otranspo-visible Google Analytics identifiers and leaves all rider tools working.
Exact journey monitoring and closed-page delivery
Manage journeys and delivery devices- Applies to
- One activated journey watch and one delivery device
- How state is known
- Granted during watch activation; browser permission alone is not consent or registration.
- What changing it does
- Ending the watch stops future checks. Revoking the registered device stops future delivery without changing other saved routes or trips.
Working location, live sharing and support access
Review or revoke journey grants- Applies to
- One active journey, recipient and short purpose
- How state is known
- Separate expiring grants are listed in Journey privacy; a location grant is not a sharing or support grant.
- What changing it does
- Revocation immediately ends that access. The replaceable working point expires within five minutes and does not create a movement trail.
Private contribution and any public aggregate use
Open contribution receipts- Applies to
- One report, observation or request
- How state is known
- Confirmed during that submission. Public rail evidence requires a second explicit choice and moderation.
- What changing it does
- Withdrawal follows the private receipt and stops future permitted use where policy allows; it does not erase already de-identified public aggregates.
Donation receipt or project-update contact
Manage from a private donation receipt- Applies to
- One private donation receipt
- How state is known
- Off until a person asks for contact and separately consents to encrypted retention.
- What changing it does
- Erasing contact removes the optional name and email while retaining only records required for accounting, refunds or disputes.
Public donor recognition
Manage public recognition- Applies to
- One donation receipt and one chosen display name
- How state is known
- Separate from contact consent and off by default. A contact name is never treated as permission to publish it.
- What changing it does
- Turning recognition off removes the name from future supporter-page output without cancelling the donation or receipt contact choice.
What works without an account
Reading rider information, changing consent on this device, and asking a privacy question do not require an account.
Access, export, correction, scoped deletion review, appeal, and permanent deletion of account-linked records require the signed-in account owner.
Saved places, recent searches, and unfinished drafts stay on this device. The server cannot export or delete them.
Manage device-only data in SettingsSite usage analytics
Optional analytics is off on this device.
Turning optional analytics off stops future optional collection on this device immediately. The page reloads to apply the new setting everywhere.
Previously aggregated or de-identified measurements cannot be traced back to this device and therefore cannot be reversed.
Access or export account-linked records
The download contains only records linked to this Otranspo account. It does not contain browser-only data or records held by the shared identity provider.
Delete account-linked Otranspo data
Review every item below. This action permanently deletes the account-linked records that Otranspo can verify, while browser data, the shared sign-in identity and payment records keep their separate controls.
Deletion review
- Account-linked reports, requests, votes, crowding submissions, private contact cases, and rider scores in the Otranspo database are deleted where no documented exception applies.
- Device-only saves and drafts stay on this browser until you clear them in Settings; the server cannot reach them.
- Notification endpoints and synced saves are removed only when they exist in the account-linked Otranspo systems covered by the verified deletion response.
- Donation and payment records may have separate legally required financial retention and are not claimed deleted by this control.
- Public aggregate statistics that no longer identify a person are not reversed.
- After successful permanent deletion, the deleted account-linked records cannot be restored.
- The shared authentication account is not deleted by this Otranspo-specific action.
Sign in as the account owner before submitting or changing account-linked records.
Ask a privacy question without an account
Use the private contact form for a general question or to ask for another identity-verification method. Do not send identity documents.
Open the privacy contact form