Privacy

In short: no profiles, no targeted advertising, no third-party tools. This notice covers the website passailbus.it and the map at mappa.passailbus.it. The Italian version is the binding one.

What stays on your device

The website saves one thing in your browser, and only if you choose it: the light or dark theme. The map also saves the lines you add to your favourites. This data stays on your device, is sent to no one and disappears if you clear the site's data from your browser. If on an iPhone you choose “Continue to the map” instead of downloading the app, a technical cookie named pib_web remembers that choice for six months and works both here and on mappa.passailbus.it, so the notice does not come back. It holds only the fact that you chose, nothing about you.

There are no profiling cookies, no targeted advertising and no external service that follows you. Site statistics are collected without cookies and without identifying you, as explained below. That is why you never see a window asking you to accept something: there is nothing to accept.

Counting who is looking at the map

On the map we count, anonymously, how many people have it open right now, how many visits there are in a day and how many different people. It works like this:

• The map page creates a random, disposable code that lives only in the open tab and disappears when you close it.
• At every map refresh the code is sent to the server, which uses it to count the visits of the day. The day's codes stay on the server until midnight, then they are deleted and only the total remains.
• To count different people without counting twice someone who closes and reopens, the server computes an encrypted fingerprint from the IP address and the type of browser, mixed with a random key that changes every night. Only the fingerprint is kept, never the address, and the address cannot be recovered from it. The same fingerprint is used to count who is connected at that moment, and after thirty seconds of silence it drops out of that count. At midnight the key and the fingerprints are deleted, so there is no way to tell whether the same person was there today and yesterday.
• The history keeps only numbers: how many people there were minute by minute, how many visits and how many different people day by day. Never who.

The main website does not do this count.

Advertising banners

The start page of the web map and of the apps may show a sponsor's banner, marked with the word «Pubblicità» (advertising). It is an image uploaded to our own server: it does not come from an ad network, uses no cookies and does not know who you are. We only count how many times each banner was seen and tapped, in total and day by day, without storing your IP address or anything else about you. If you tap the banner, you briefly pass through our server, which counts the tap, and then reach the sponsor's website, whose own data rules apply from there. There are no banners on this website.

Site statistics

To know how many people visit the site and which pages they read we use Simple Analytics, a European service designed not to collect personal data: no cookies, no device fingerprinting, no identifier that follows you from one visit to the next. It receives the page visited, the referring site, the device type and the country, derived from an IP address that is not stored. None of this can be traced back to you. What it collects and how it handles it is described in its privacy policy and on the What we collect page.

If your browser has "Do Not Track" or tracking protection enabled, or if you block scripts, the visit is not counted and the site works just the same.

What the server sees

The map server receives the browser's ordinary requests to show the map, trips and stops. It keeps no archive of who looks at what and builds no profiles. Technical logs contain the IP address of the requests: they serve only to run and protect the service, on the basis of legitimate interest, and are deleted after 14 days at most.

The main website is served by Cloudflare as static pages and keeps no logs of its own.

What leaves from here

The map's background tiles come from OpenStreetMap's servers: your IP address reaches them, as with any online map. The typeface, the scripts and the map library are hosted on our own domains precisely so as not to add other recipients. Website and map pass through Cloudflare, which protects and speeds them up and, like any content delivery network, sees the IP address of whoever connects.

If you turn on location, your position is used to centre the map and to find the stops nearest to you. For this search the coordinates are sent to the map server, which uses them only to answer: they are not saved or written to the logs.

If you want to delete everything

Clear the site's data from your browser settings, or remove the lines from your favourites one by one. There is no need to write to anyone, because there is nothing of yours here to delete.

Data controller

Danilo Tallarico, reachable at amministrazione@passailbus.it. You can request access to or deletion of your data by writing to the same address, and you can contact the Italian Data Protection Authority (Garante per la protezione dei dati personali).

If you write to report a problem, the email address you use stays in the mailbox and serves only to reply to you.