Privacy Policy

Last updated: 13 October 2026

This policy explains how MgonnacrushT Limited (“we”) handles personal data when you use City Line Map, our London bus, tube and river map. It is written for UK visitors under UK GDPR, the Data Protection Act 2018, and PECR (including the Data (Use and Access) Act 2025).

This website is not an online shop. We do not create user accounts and we do not ask you to submit a contact form here. If you email us, that correspondence is separate from map use.

Product-specific processing for other MgonnacrushT Limited products (for example SaveT, or the company site at mgonnacrusht.co.uk) is covered by those products’ own notices.

Who we are

The data controller is MgonnacrushT Limited, a company registered in England and Wales (company number 16877439).

Registered office: Unit 501 Leroy House, 434-436 Essex Road, London, United Kingdom, N1 3FY.

Privacy, bugs, ideas, and questions about this map: citylinemap@mgonnacrusht.co.uk. Company website: mgonnacrusht.co.uk.

What we process

Hosting and security (every visit)

The map is served through Cloudflare Pages. Cloudflare processes connection data that is typical of any website (IP address, date and time, URL requested, user agent, TLS details) so the site can be delivered and protected. Cloudflare may set strictly necessary cookies for security or bot management. We do not use those logs to profile you or to serve ads.

Country for image ads

If promotional slots are on, the browser requests Cloudflare’s same-origin /cdn-cgi/trace and we read only the two-letter country code (loc=) so we can choose which of our own image creatives to show. If that request fails, we treat the country as GB. We do not send your IP address to Travelpayouts, ip-api, or any other geolocation API.

Map tiles and fonts

The basemap is OpenFreeMap Liberty. Your browser requests vector tiles and fonts from tiles.openfreemap.org. Those requests include your IP address and the map area you are viewing (tile coordinates). We do not receive a copy of those logs. OpenStreetMap data is used under its licence; see attribution on the map.

Transit geometry

Route and stop geometry is TfL Open Data, built into static files on this site. Your browser does not call the TfL API and does not send us a TfL key. We do not receive your location from the device GPS.

Pins you add (this device only)

If you add a pin, the label and coordinates are stored in your browser’s local storage under dynamicMap.userPins (with type, colour, and icon). That pin stays on your device. We do not upload it. Clearing site data or using Clear my pins deletes it. This storage is needed to provide the pin feature you asked for.

Shareable map links

The address bar records map state (centre, zoom, visible lines, and optionally a focused stop, curated pin, or user pin). If a user pin is focused, the label you typed is included in the URL. We do not log that URL on a server of ours. If you copy or post the link, anyone with it can see that state. Social share buttons (Facebook, X, Reddit) send the current URL to those services only when you click them.

Analytics (Umami, EU)

We use Umami, a cookieless analytics tool we host on our own server (umami.mgonnacrusht.co.uk) in the EU. We use it to understand how City Line Map is used, how promotional slots perform, and which parts of the map attract interest, so we can improve the site. It records page views, referrer, browser, operating system, device type, and coarse country derived from IP. Promotional impressions and outbound partner clicks are counted by catalogue id (and a partner name, not the destination URL). We also count aggregate map interactions: opening or hovering a catalogue pin, using or cancelling the pin tool (visual style only, not your label or where you placed it), opening the selected-lines panel (which public line ids were in that set), and opening a public stop (stop name, bus/rail/river, and the stop’s map coordinates from our transit data, not GPS from your device). The software does not store raw IP addresses. The tracker is configured so the query string and URL hash are not sent, so share-link parameters and user pin labels in the address bar are not included in analytics.

We do not use this data to profile you, retarget you, or track bookings (those stay with the partner). You can object at any time:

Opt out of analytics

You can also email citylinemap@mgonnacrusht.co.uk to object.

Emails you send us

If you write to the address above, we process the content and your email address to reply and to keep ordinary business records.

City Line Map app (Android)

The app shows the same map and follows this policy. Differences from the website:

• Location. Only if you tap “Show my location” and allow it. Your position is used on your phone to centre the map. It is never sent to us or stored. If you are outside the city the app covers, the position is not used at all. No background location.
• Pins you add are stored in the app’s storage on your phone. Uninstalling the app or Clear my pins deletes them.
• Map data. The app downloads route data from City Line Map (Cloudflare) and map tiles from OpenFreeMap, and keeps a copy on the phone for offline use. These hosts see your IP address as with any website visit.
• Analytics. The same self-hosted Umami counts app screens and the same aggregate map interactions as above (plus share and “Show my location” taps, without coordinates). No advertising ID. You can switch it off in the app under Settings.
• No ads and no Google or Huawei analytics or advertising services in the app. Google Play or Huawei AppGallery process install and store data under their own policies.

What we do not do

• No user accounts, newsletters, or contact form on this map.
• No Google Analytics, advertising pixels, or Google Ads on this site.
• No third-party advertising scripts or widgets (for example Travelpayouts tpscr.com). Promotional slots use our own images and outbound links.

Partner and affiliate links

Curated pins and promotional slots may include partner links. We may earn a commission if you book through them. Clicking a link takes you to the partner’s site; they may then set their own cookies and process your data under their policies. We do not set a tracking cookie on City Line Map for that click. Full commercial disclosure is in our Terms of Use.

Lawful bases

• Legitimate interests: running and securing the site, understanding aggregate use (Umami), showing country-appropriate image ads, responding to email.
• Feature you asked for: pin labels and coordinates stay in your browser. We do not upload that pin. That local storage is needed for the pin tool.
• Legal obligation: keeping records where the law requires it (for example accounting if an email becomes a paid engagement).

Cookies and similar storage

We do not use non-essential first-party cookies. Device storage we use:

• User pins (local storage): required for that feature.
• Analytics opt-out (umami.disabled): remembers that you objected, in this browser only.
• Cloudflare: may set strictly necessary security cookies on the live site.

Because we do not load advertising or non-exempt tracking scripts, this site does not show a cookie consent banner. If we add advertising scripts, Google Ads, or similar technologies, we will update this policy and obtain PECR consent before they run.

Processors and transfers

We do not sell personal data. Providers that may process visitor data:

• Cloudflare: hosting, CDN, and security (Cloudflare Pages).
• Umami (self-hosted, EU): cookieless analytics on our server at umami.mgonnacrusht.co.uk, for site improvement only. We operate this instance ourselves.
• OpenFreeMap: map tiles and fonts requested by your browser.

Some of these providers operate outside the UK (for example a US parent company even when data is hosted in the EU). Where UK GDPR applies, we rely on the safeguards those providers document (such as standard contractual clauses) or other lawful transfer mechanisms.

Retention

• Hosting logs: according to Cloudflare’s defaults for Pages, then deleted or aggregated.
• Umami: according to our instance settings, for site-improvement reporting only.
• Emails: as long as needed to handle the message and ordinary follow-up (typically up to 24 months, longer if a live engagement or legal hold requires it).
• User pins: until you delete them or clear this site’s data.

Your rights

Where UK GDPR applies you may ask to access, correct, erase, or restrict personal data, to object to processing based on legitimate interests (including analytics), and to data portability where it applies. Email citylinemap@mgonnacrusht.co.uk. You may complain to the Information Commissioner’s Office at ico.org.uk.

We often cannot identify a map visitor from analytics or hosting logs alone. Pins exist only on your device; we cannot retrieve them from our servers.

Children

City Line Map is a public travel map. It is not directed at children and we do not knowingly collect children’s data. We do not use the map to profile children.

Company details

MgonnacrushT Limited is registered in England and Wales, company number 16877439. Registered office: Unit 501 Leroy House, 434-436 Essex Road, London, United Kingdom, N1 3FY. We are not VAT registered. City Line Map is a product of this company, published at citylinemap.com. More about us: https://mgonnacrusht.co.uk. Domain registration is separate from visitor analytics.

Changes

We may update this policy when the product changes. The date at the top will change when we do.

City Line Map is created by MgonnacrushT Limited.