Privacy

adelaidelive.app · last changed 10 September 2026

These pages are a personal project, not a business. They are built to be useful without knowing who you are, so most of the time they hold nothing about you at all. This page says exactly what is kept, when, and how to get rid of it.

The short version. You can use every page without an account, and then nothing about you reaches the server. If you make an account, it holds your email address and the handful of settings the pages remember for you. Your location is worked out on your device and never sent anywhere. There is no analytics, no advertising, no tracking, and nothing is sold or shared. You can delete the whole account yourself, in one step, at any time.

Using the pages without an account

Every page works signed out. Choices you make then are kept by your browser, on your device, using local storage. That includes the day or night look, your council and collection zone on the bin page, your discounts and fuel type on the fuel page, and your starred stops on the metro page.

Those values stay in that browser. They are not sent to the server, they do not follow you to another device, and clearing your browser data removes them. The server sees only the ordinary web request for the page and its data files.

What an account stores

An account exists for one reason: so the same settings reach you on your phone and your laptop. When you have one, the following is stored on the server.

Your email address. Used to sign you in, to send a password reset if you ask for one, and to tell you about a change to the account itself.
Your password, hashed. Stored with bcrypt, which is one-way. The password itself is never written down and cannot be read back, by me or by anyone with the file.
A linked account, if you use one. Signing in with Google stores the account identifier Google gives this app, the email address on it, and when it was last used. Nothing else from your Google account is requested or kept.
Your page settings. The same short list as above: council and zone for bins, discounts and fuel type for fuel, starred stops for metro. Each page is capped at 16 KB, because these are preferences, not documents.
Your sign-in sessions. For each device you are signed in on, the time, the browser's user agent string and the IP address it signed in from. This is what lets you see and end a session, and it is how an unexpected sign-in would be noticed.
Your plan. Currently "free" for everyone. There is no paid plan yet.

Your bin council is worth calling out on its own. It is a suburb-level answer, not a street address, and the pages never ask for your address.

Where your location is used

Four pages can use your device's location: fishing spots nearest you, petrol stations within a radius, the council you live in, and the stops around you. In every one of them the browser asks your permission, hands the coordinates to the code running on your device, and the answer is worked out there against a list the page already downloaded.

Your coordinates are never transmitted. They do not reach this server, and they are not put in a URL or a query string. If you are signed in, the result you settle on can be saved, for example the name of your council, but never the position it came from.

Cookies

There is one cookie, and only after you sign in. It holds a signed session identifier, is set on .adelaidelive.app so that one sign-in covers every page, and is marked HttpOnly, Secure and SameSite=Lax. Signing out deletes it.

There are no advertising cookies, no third-party cookies and no analytics cookies. Nothing is set before you sign in.

Server logs

The web server keeps an ordinary access log: the time, the address requested, the response code, the browser's user agent and the IP address. It is used to see whether the site is up and whether something is broken. The log rotates by size and only the three most recent files are kept, so entries age out on their own within days. It is not joined to accounts and not used to build a picture of anyone.

Other companies involved

The list is deliberately short.

Google, only if you choose "Continue with Google". You sign in on Google's own pages, so Google knows you signed in to this app. This app asks for the three basic pieces of information Google calls non-sensitive: that you are signed in, your email address, and your basic profile. It never asks for your Gmail, Drive, contacts or calendar, and could not read them.
Resend, which sends the account email. A password reset message contains your email address and a link with a one-time token. Nothing else is passed to them and no marketing email is ever sent.
Google Fonts, which serves the two typefaces the pages use. Loading a font means your browser makes a request to Google's font servers, and that request carries your IP address, as any web request does.
OpenFreeMap, on the metro page only, which serves the map tiles. Your browser fetches the tiles for the part of the map you are looking at, which tells that service which area you are viewing. The map data behind it is OpenStreetMap.

Everything else the pages show, including all the weather, tide, grid, transport, fuel and council data, is collected by this server on a schedule and served from here. Your browser never talks to those sources, so they learn nothing about you.

What is never done

No analytics of any kind, first-party or third-party.
No advertising, no ad networks, no tracking pixels, no fingerprinting.
Nothing is sold, rented, traded or handed to a data broker. There is no business model here to sell it into.
No profile of your behaviour is built, and your settings are not read for any purpose other than showing them back to you.
No email beyond the account itself. There is no newsletter and no list.

Seeing, changing and deleting your data

Your account page at account.adelaidelive.app shows everything held about you, because there is nothing held that it does not show.

Change a setting by changing it on the page it belongs to. It overwrites the old one.
Clear one page's settings on that page. Unstarring a stop or unticking a discount updates what is stored, straight away.
Delete the account from the bottom of the account page. It asks you to type your email address, then removes the account, the password, any linked account, every setting and every session, immediately and for good. There is no grace period and no archived copy, so it cannot be undone.

If you would rather ask a person, or want a copy of what is held, write to youmu.freedom@gmail.com.

How long things are kept

Account information is kept until you delete the account, and disappears with it. Password reset links expire fifteen minutes after they are sent. Access logs age out as the files rotate. There is no backup copy of the account database, so a deletion is final the moment you confirm it.

Security

Everything is served over HTTPS. Passwords are hashed with bcrypt. Session cookies are signed, HttpOnly and Secure. The database lives on a single server in Australia and is not exposed to the internet.

Honesty is worth more than reassurance here: this is one person's project on one small machine. It is built carefully, but it is not audited, and you should not store anything on it you would be hurt to lose. Please use a password you do not use elsewhere, or sign in with Google and set none at all.

Children

The pages are general information about Adelaide and are not aimed at children. Accounts are not knowingly created for anyone under 13. If one has been, write to the address above and it will be deleted.

Changes to this page

If what is stored ever changes, this page changes with it and the date at the top moves. A change that affects an existing account will also be sent to the email address on it.

Who to contact

These pages are run by Simon You, in Adelaide, South Australia. Email youmu.freedom@gmail.com about anything on this page, including a request to see, correct or delete what is held about you.

Back to the pages · Terms · Written by hand, not by a template.