What we store, and what we do not

We store: the town, what you tapped (calm, busy or don't come), and the time. We also store two one-way codes, used only to stop one person or one script sending hundreds of reports:

• a code made from a random number your browser created, so we can recognise the same device sending again;
• a code made from your network: the block of 256 internet addresses yours belongs to.

Nothing else is stored: no name, phone number, email address, exact internet address or location. The site does not ask for your location.

We store the same two codes, the town and the weekend — so we can show how many people are heading somewhere, and let you change or cancel your plan. Plans are kept apart from crowd scores and cannot change one.

A homestay, hotel, taxi or guide applying on our partner page sends us its business name, type, town, mobile number, email and an optional message, and we keep the network code above to limit spam. Once a listing is agreed, its name, type, town and mobile number are shown on that town's pages. The email and the message stay private, for us to reply. A business can ask us to remove its details at any time: write to partner@rushcheck.net.

A few local people we know report the crowd in their own name. We keep their name, their Google (Gmail) address and their town or trek. They sign in with Google, which tells us only their email address. Signing in puts one login cookie on their phone, so their reports can carry their name; it lasts 90 days, or until they sign out or we switch them off. Their name shows next to their reports. Their email address stays private.

Your browser keeps a few small items for this site: the random number above, the reports you sent and your plan. They sit in your browser's storage for this site, and only this site can read them. Clearing this site's data in your browser removes them. Visitors get no cookies.