Privacy
Short version: what you type stays in your browser. There are no accounts and no cookies.
01Who's responsible
How Bangalore moves is a personal, non-commercial project run by Alabhya Vaibhav in Bengaluru, India. Write to alabhya.vaibhav1997+hycm@gmail.com about anything on this page. That address is also the contact for privacy complaints (grievances).
The site is built for people in India, mostly in Bengaluru. It's designed to follow India's Digital Personal Data Protection Act, 2023 by avoiding personal data wherever possible.
02What you enter stays on your device
The commuters you add, their names and times, and whether names are shown are saved in your browser's localStorage. They are not sent to me or to anyone else. The keys are:
blr-moves-v2: your list of commutersblr-moves-names: whether the "Show names" switch is onblr-moves-contrib: a random ID, only created if you opt into city-wide stats (see below)
03City-wide stats (only if you opt in)
When you add yourself there's a checkbox, off by default, labelled "Add me to the city-wide stats". If you tick it, this is sent to a database run by Supabase in Mumbai, India:
- the area you live in and the area you work in, chosen from the fixed list of ten
- when you leave home and when you leave work, rounded to the nearest half hour
- your commute length, rounded to the nearest 5 minutes
- a random ID created in your browser. It isn't linked to you; it exists so you can delete what you shared.
Your name, or anything else you type, is never sent. Other visitors only see totals: how many people are at home, at work or on each route in each half hour, and how many are on the road in each hour. Any number smaller than 3 is left out, and nothing is shown until at least five commutes exist. Nobody can see individual entries through the site.
Until 200 real commutes have been shared, those totals also include a simulated baseline: about 4,000 generated commutes that follow typical Bengaluru patterns. They're made up, contain no personal data, and are labelled as simulated wherever they're shown.
Shared commutes are kept until you delete them (see Clear your data) or the project shuts down, at which point they're deleted. Like any server, Supabase may briefly keep technical logs, such as IP addresses, to run and protect its service. See Supabase's privacy policy.
04Anonymous usage analytics
To see which parts of the site get used, I count visits and a few interactions with PostHog. It runs without cookies and without storing anything in your browser. Each page load gets a fresh random ID, so visits can't be linked together or to you.
Along with the events below, PostHog receives standard technical details that every browser sends: the page address, the site you came from, browser and operating system, screen size, and an approximate location (country or city) worked out from your IP address. The IP address itself is thrown away, not stored. PostHog processes this data on servers in the United States. Read their data policy.
Nothing you type into the app is ever sent. No names, exact times, or free text. Here is everything that's counted:
| When you… | What's recorded |
|---|---|
| Page visits | which page was opened (home, about, support, privacy, legal, or not found) |
| Adding a commuter | the two areas picked from the list, the commute length as a range (under 30, 30 to 60, or over 60 minutes), whether a random name was used, and whether you opted into city-wide stats |
| Removing a commuter, resetting the samples | only that it happened |
| Opening or closing the Add yourself dialog without adding | only that it happened |
| Play, pause, dragging the timeline, changing speed | play or pause, the hour you dragged to (0 to 23), and slow, normal or fast |
| Showing or hiding names | on or off |
| Looking at a neighbourhood | which of the ten areas, once per visit |
| Sharing | where you pressed Share (map or footer) and how you shared (share sheet, copy, WhatsApp, X, LinkedIn) |
| Arriving from a shared link | how the link was shared |
| Clicking a link to another site | that site's domain name only |
| Clearing your data | only that it happened |
| Pressing a Chip in button | the amount you picked (₹50, ₹100, ₹150 or ₹500) and whether you opened a UPI app or copied the UPI ID. Not whether you paid. |
05Hosting
The site is hosted by Vercel. Like any web host, Vercel handles your IP address and browser details to deliver pages and protect against abuse, and may keep short-lived server logs. I don't use those logs to track anyone.
06Chipping in with UPI
If you chip in from the support page, the payment happens entirely in your UPI app, between your bank and mine. This site never sees your bank details, UPI PIN or whether the payment went through. Like any UPI transfer, I'll see the name and UPI ID your bank shares with the payment. I use that only to keep my own records, and never publish it or add it to the site.
07No accounts, no cookies
There's nothing to sign up for, and this site sets no cookies. Fonts are served from this site, not from Google or another font service.
08Children
The site isn't aimed at children, and it doesn't knowingly collect personal data from anyone, including people under 18. If you're under 18, please don't type real names into the app, and ask a parent or guardian before opting into city-wide stats.
09Your rights and clearing your data
Because the site avoids collecting anything that identifies you, there's usually nothing on my side to look up, correct or hand over. Your list lives only on your device, and what you shared can't be traced back to you. You still have every right under India's data protection law. To use them:
- Delete: press the button below. It deletes anything this browser shared to the city-wide stats, then removes all of this site's keys from your browser. You can also clear "site data" for this address in your browser settings.
- Ask a question, correct something, or complain: email alabhya.vaibhav1997+hycm@gmail.com. I'll reply as soon as I can, and within 30 days.
- Escalate: if you're not happy with my reply, you can complain to the Data Protection Board of India.
After clearing, the home page shows the six sample commuters again.
10Changes
If this policy changes, the date below will change too, and anything important will be noted on this page.
Last updated: 27 September 2026.