Brisbane Ferry

Privacy Policy

Last updated 20 April 2026.

Who we are

Brisbane Ferry is a community-built, unofficial app that displays live and scheduled departures for Brisbane's CityCat and CityHopper ferry services. The app is independent of and not affiliated with TransLink, Queensland Transport, Translink Transit Authority, the Brisbane City Council, or any ferry operator. Live data is sourced from TransLink's publicly published General Transit Feed Specification (GTFS) and GTFS-Realtime feeds.

This policy explains what personal information the app collects, why it collects it, how it's used, and the choices you have. If anything here is unclear, use the feedback button in the app to reach out.

What we collect and why

Location (iOS app only, on-device)

If you tap the Use my location button in the stop selector or the locate-me control on the map, the app requests your device's current location via the iOS location-services prompt. Your location is used only in-memory, only while that screen is open, and only to compute the nearest ferry terminal. Your location is never transmitted off your device and is not stored anywhere.

Location access is opt-in. You can decline the system prompt, revoke permission in iOS Settings at any time, or simply not tap the button. The rest of the app works without it.

Feedback form

If you submit the in-app feedback form, we receive the message you type. You can optionally include your name and email — both fields are optional and empty by default. Along with your submission we log the URL you submitted from, a timestamp, and your browser/OS user-agent string (this is routinely available to any web server).

Feedback is forwarded to a self-hosted n8n webhook that notifies the maintainer. The content you type is not used for any purpose other than responding to your feedback.

Analytics

We use two analytics services so we can understand general usage and keep the app performing well:

• Google Analytics 4 — records anonymised pageviews, session length, approximate location (city-level, inferred from IP), and device/browser class. Google Analytics sets cookies in your browser. Data retention follows GA4's default of 14 months.
• Vercel Analytics + Speed Insights — anonymous page-view counts and Web Vitals (page-load timings). No cookies; request-counted only.

You can block either service with any standard ad-blocker, Safari's intelligent tracking prevention, or your browser's Do Not Track setting (we honour it for Vercel Analytics; Google Analytics ignores DNT by default per its own policy).

Browser storage

The app uses your browser's localStorage and sessionStorage to remember preferences. Specifically:

• brisbane-ferry-selected-stops — the ferry stops you pick as origin/destination.
• brisbane-ferry-remember-selection — whether you opted in to remember your selection across visits.
• brisbane-ferry-schedule-cache-v2 — a cached copy of the daily ferry schedule (up to ~50 KB) so the app loads quickly.
• brisbane-ferry-selected-stops-session — temporary stop selections that only last for the current browser tab.
• brisbane-ferry-departure-time — the "depart from" time filter for this session only.

These keys stay on your device. Clearing browser data removes them. None of them are transmitted to our servers.

What we don't collect

• No account. No login. No password.
• No personally identifying information is required to use the app.
• No advertising trackers or third-party ad networks.
• No sale or sharing of your data with data brokers.
• No push notifications at present.
• No background location tracking.

Who your data is shared with

The app is a small piece of software talking to a few third-party services. The relevant flows are:

• TransLink — the app fetches public schedule and real-time feeds from TransLink's servers via our API proxy. No user-identifying information is sent to TransLink.
• n8n webhook — only receives your feedback if you submit the form.
• Google Analytics (Google LLC) — receives anonymised analytics events. See Google's privacy policy.
• Vercel (Vercel Inc., our hosting provider) — hosts the app and receives anonymous analytics events. See Vercel's privacy policy.
• Apple — if you downloaded the iOS app from the App Store, Apple provides crash reports back to us via App Store Connect (aggregated, no personal information). See Apple's privacy policy.

How long data is kept

• Feedback submissions are retained by the maintainer indefinitely unless you ask for them to be removed.
• Google Analytics: 14 months (default retention).
• Vercel Analytics: per Vercel's retention defaults.
• Browser storage: until you clear site data from your browser, or the schedule cache naturally expires after 24 hours.

Your rights

Depending on where you live, you may have the right to:

• Ask what personal information we hold about you.
• Ask for it to be corrected or deleted.
• Withdraw consent for analytics (block the scripts with your browser or ad-blocker).

Because the app collects so little (we don't know who you are), the most common request is "please delete my feedback submission". To make any request, use the in-app feedback button and include enough context (rough date, content, email you used) so we can find and remove it.

Children

Brisbane Ferry is not directed at children under 13 and does not knowingly collect personal information from anyone under 13. If you believe a child has submitted information, contact us and we will delete it.

Security

The app is served over HTTPS with a strict Content Security Policy and standard security headers (HSTS, X-Content-Type-Options, Referrer-Policy, Permissions-Policy). The feedback webhook is authenticated with a shared secret that is never exposed to the browser.

International users

The app is hosted on Vercel's global edge network. Analytics providers (Google, Vercel) may process data in data centres outside Australia. If you use the app, your data may be transferred to and processed in countries other than your own in line with those providers' terms.

Changes to this policy

When this policy changes in a material way, the "last updated" date at the top will change and, if the change affects data collection, we'll note it in a short visible banner on the app. Continued use of the app after an update constitutes acceptance of the revised policy.

Contact

The quickest way to reach the maintainer is the feedback button inside the app. For privacy-specific questions, include "privacy" or "data" in your message so it's easy to find.