Privacy

What we collect

Nothing at all unless you choose to share it. Browsing the app sends us no personal information.

If you turn on location, your coordinates stay in your browser for as long as the page is open. They are never sent to us, never written to storage, and are gone when you close the tab.

If you opt in to improving crowd estimates, your device works out which venue you are near and sends only these five things:

• the venue you confirmed
• a time rounded to the nearest 15 minutes
• a random identifier that changes every day
• the age group you selected
• how confident the match was

No coordinates. No name, email, phone number, or device identifier. The random identifier is re-hashed with a server key before it is stored, so the stored value is not the value your browser holds.

Why

Only to estimate how busy a venue is. A presence signal is never displayed until at least 5 different contributions agree, so no single person can be picked out of it. We never show crowd counts broken down by age group.

It is not used for advertising, is not sold, and is not shared with venues or anyone else.

How long we keep it

Presence records delete themselves after about two hours. Community reports last six hours, line timers twelve, and simulated conditions a day. This is enforced by the database rather than by a routine that somebody has to remember to run.

Stopping and deleting

Press Stop sharing at any time and your device stops contributing immediately. Because contributions carry no identifier tied to you, we cannot single out and delete a past record on request. Everything already sent expires on its own within about two hours.

Clearing your browser storage discards the rotating identifier, and a new one is generated the next time you opt in.

A note on the data you see

Crowd conditions in this app are simulated for a demonstration. They are not measurements of real venue occupancy, and no venue supplies data to this project.