Privacy Policy

1. Introduction

LiveTrafik is operated by SIRT AB (company registration number pending), referred to below as “we”, “us” or “LiveTrafik”. We care about your privacy and aim to process as little personal data as possible. This policy describes what information we collect, how it is used and what rights you have.

2. What data do we collect?

2.1 Analytics data (PostHog)

We use PostHog to understand how the service is used. Analytics runs in cookie-free mode — no information is stored in your browser (no cookies, no localStorage). The following data may be sent to PostHog:

• Page views (which pages you visit)
• Device type and browser type (e.g. “mobile”, “Chrome”)
• Screen resolution
• Anonymised IP address (the last octets are masked)
• Referrer URL (where you came from)
• Which country/region you are in (based on anonymised IP)

No session is recorded. No personally identifying ID is stored. Analytics data is aggregated and anonymous. We respect the browser’s “Do Not Track” setting — if you have enabled DNT, no analytics data is sent at all.

2.2 Google Analytics

We use Google Analytics to measure traffic and understand how visitors find us. Google Analytics sets cookies in your browser and is governed by your consent choice via Google Consent Mode v2 and our consent dialog (Google’s certified CMP). If you do not consent to analytics storage, Google Analytics is not activated.

• Page views and session length
• Traffic source (search, direct, referral)
• Device type, browser and screen size
• Geographic region (country/city, based on IP)

IP addresses are anonymised automatically by Google. Data is stored on Google’s servers and processed in accordance with Google’s privacy policy.

2.3 Advertising (Google AdSense)

We show ads on parts of the site via Google AdSense. We have chosen to serve only non-personalised ads to every visitor. This means ads are chosen based on the content of the page — not on your behaviour or a profile about you. We do not allow Google to use your data to build an advertising profile, and ads are not personalised even for visitors who have given consent. Google does, however, receive some technical information (e.g. IP address and browser type) in order to serve and measure the ads. Consent for storing information on your device is handled via our Google-certified consent management platform (CMP), which follows the IAB TCF v2.2 framework, where you can accept, reject or manage your choices at any time.

In connection with advertising, Google may process limited information:

• Cookies/identifiers for frequency capping and fraud prevention (not for profiling)
• IP-based approximate location
• Ad interactions (impressions and clicks) for measurement

Read more about how Google uses information from sites that use Google’s services in Google’s partner sites notice.

2.4 Error monitoring (Sentry)

We use Sentry to catch technical errors in the service. If an error occurs, Sentry may send information about it, including:

• Error message and stack trace
• Browser type and version
• The URL where the error occurred

Sentry does not collect names, email addresses or other contact information unless you are signed in (see section 2.5).

2.5 Sign-in via Google OAuth

If you sign in to LiveTrafik (e.g. to save commuter routes), authentication happens via Google OAuth 2.0. When signing in, we receive the following details from Google:

• Google account ID (internal identifier)
• Email address
• Display name
• Profile picture URL

These details are stored in our database and linked to your account. They are used only to identify you and provide personalised features. We never share this data with third parties for marketing purposes. The sign-in session is handled via an httpOnly cookie (authentication token) that is stored securely in your browser and can never be read by JavaScript.

2.6 Functional cookies

We use a cookie for core functionality: your selected country setting (e.g. “se” for Sweden). Your consent choice for analytics and advertising is stored by our consent platform (Google’s CMP) as a TCF consent string. These cookies contain no sensitive personal information and are necessary for the service and your choices to work correctly. They do not require consent under the GDPR exemption for strictly necessary cookies.

3. Why do we collect data?

4. Cookies

We use cookies for necessary functionality, analytics (with consent) and advertising (with consent). PostHog analytics runs entirely without cookies. Analytics and advertising cookies are loaded only after your consent. You can change your consent at any time via “Manage options” in our consent dialog.

5. Data processors and third parties

Data transfers to Google are made under the EU Standard Contractual Clauses (SCC).

6. Retention period

• Analytics data (PostHog): Stored in PostHog for up to 1 year, then deleted automatically.
• Error logs (Sentry): Stored for 90 days.
• Account information: Stored until you request deletion of your account.
• Advertising and consent data: Managed by Google in accordance with Google’s own retention rules.

7. Your rights under the GDPR

You have the right to:

• Access the personal data we process about you.
• Rectify inaccurate data.
• Erase your data (“the right to be forgotten”).
• Restrict the processing of your data.
• Object to processing based on legitimate interest.
• Withdraw consent at any time, via “Manage options” in the consent dialog.
• Data portability — receive your data in a machine-readable format.
• Complain to the Swedish Authority for Privacy Protection (IMY) if you believe we breach the GDPR.

To exercise your rights, contact us at the address below.

8. Contact

Data controller: SIRT AB

For questions about this privacy policy or to exercise your rights, please contact us by email. Contact details are available on the website.

9. Changes to this policy

We may update this privacy policy when needed. For material changes we will inform you via the service. The date of the latest update is shown at the top of this page.