What we collect, and what we don’t.

The site runs no analytics, ads or tracking scripts. Our own code sets no cookies and stores nothing in your browser. We don’t build profiles or follow you from page to page.

• What we keepYour email address, the page you signed up on, when you signed up, when we sent your welcome email and, if you leave, when you unsubscribed. We also keep your country and a scrambled form of your IP address, to spot spam.
• The scrambled IP addressA keyed hash: it shows us whether two sign-ups came from the same address, but we can’t turn it back into the address.
• What we sendOne welcome when you sign up, then new research and data a few times a year. It comes from updates@news.transitlab.nyc, sent through Cloudflare Email Service. Replies go to hello@transitlab.nyc.
• LeavingEvery email has a one-click unsubscribe link. We then keep your address on a do-not-email list, so we never mail you again by mistake. Sign up again to rejoin.

The get involved form keeps your name, email address, the interests you pick, your message, the page you sent it from and when, plus your country and the same scrambled IP address. We forward a copy to our inbox at hello@transitlab.nyc so we can reply.

Email you send to hello@transitlab.nyc reaches our inbox through Cloudflare Email Routing. We use what you send only to write back.

The API key form keeps your email address, when you asked, your country and the same scrambled IP address, and emails the key to you. We store a fingerprint of the key (a SHA-256 hash) and its first 12 characters, never the key itself.

When you use a key, we count its queries, the time they take and the data they read, by day, to enforce the limits. We don’t keep the text of your queries, except for up to ten minutes in Cloudflare’s cache, so the same query can be answered again without running it.

Our forms use Cloudflare Turnstile to tell people from bots. It loads only once you start using a form and never asks you to solve a puzzle. To do this, Cloudflare processes your IP address and details about your browser and device, under Cloudflare’s privacy policy. We use only its pass or fail.

Cloudflare also caps each IP address at five posts a minute per form. We don’t store those counts.

• CloudflareHosts the site, the forms and the database that holds sign-ups and messages. Like any host, it sees each request, including your IP address, and keeps some logs under its own policy.
• Google FontsPages load the Geist typeface from Google, so your browser asks Google’s servers for it, which shows Google your IP address.
• MapsPages with maps load MapLibre from cdnjs and map tiles from OpenFreeMap.
• SQL consoleThe SQL console runs in your browser, so your queries never reach us. It loads its code from jsDelivr and esm.sh and reads data files from data.transitlab.nyc.

We keep sign-ups and messages until you ask us to delete them. We don’t sell them or share them with anyone beyond the services named here.

To see what we hold about you, or to have it deleted, email hello@transitlab.nyc from the address you used. We’ll delete it and tell you when it’s done.

If this page changes, we’ll change the date at the top.