This policy explains what information myTransit (“myTransit”, “we”, “us”) collects when you visit mytransit.com.au and join our launch list, and what we do with it. We handle personal information under the Australian Privacy Principles (Privacy Act 1988 (Cth)).
What we collect
When you sign up to the launch list, we collect:
- Your email address. You give this to us directly so we can email you when myTransit launches.
- A truncated SHA-256 hash of your IP address. We do not store your raw IP. The hash is used only to prevent abuse of the signup form.
- Your browser’s User-Agent string (up to 500 characters), used only to investigate abuse if it happens.
- The timestamp of your signup.
Analytics & site measurement
When you visit the site we use three measurement tools that may set cookies or local-storage entries in your browser:
- PostHog — product analytics. Pageviews and anonymous events. Identified profiles are created only after you sign up.
- Vercel Analytics — privacy-friendly aggregate visitor counts. No cross-site tracking.
- Vercel Speed Insights — page-load performance metrics.
You can block these with your browser’s tracking-prevention settings or a content blocker without affecting the rest of the site.
Why we collect it
- To email you when myTransit becomes available (the reason you signed up).
- To detect and prevent abuse of the signup form.
- To understand how the site is used in aggregate so we can improve it.
We do not sell or rent your information. We do not use it to send ads or to profile you. We do not share it with brokers.
Who has access
We use the following service providers as data processors. Your information passes through their systems so we can operate the site and send launch updates:
- Supabase — database hosting where the email list is stored.
- Resend — sends the launch and welcome emails.
- Vercel — hosts the website and runs the signup endpoint.
- PostHog — product analytics, as described above.
Each of these vendors has their own privacy practices. We have configured them to store data securely and to delete it on request.
How long we keep it
- Your email stays on the list until myTransit launches or you unsubscribe — whichever comes first.
- IP hashes and User-Agent strings are deleted after 90 days.
- Analytics data is retained according to each provider’s default retention policy (typically 12 months for PostHog).
Your rights
Under Australian privacy law you can:
- Ask us what information we hold about you.
- Ask us to correct it if it’s wrong.
- Ask us to delete it. Email hello@mytransit.com.au and we will remove your record within 30 days.
- Unsubscribe from launch emails at any time — every email includes a one-click unsubscribe link.
- Complain to the Office of the Australian Information Commissioner if you think we’ve mishandled your information.
Security
Data is transmitted over HTTPS and stored in encrypted databases. We use a strict Content Security Policy in the browser, deny clickjacking, and document a security disclosure contact at /.well-known/security.txt.
Children
The launch email list is intended for people 16 or older. If you’re under 16, please don’t sign up — ask a parent or guardian to sign up instead. If we learn we’ve added someone under 16 to the list, we’ll delete the record. This section is about email signups on this website; the myTransit app itself, when released, is a public transport tool that anyone can use.
Changes
If we materially change this policy we’ll update the date at the top and, where it affects you, email subscribers before the change takes effect.
Contact
Questions or privacy requests: hello@mytransit.com.au.
myTransit · Sydney, NSW, Australia.
See also: Terms of Use.