Privacy Policy

BuzuRadar is a public transparency tool that allows Rio de Janeiro residents to monitor the city bus fleet in real time. We are committed to providing this service with the utmost respect for user privacy.

This policy describes the categories of data we process, when we use cookies for advertising or analytics, and how we comply with Brazil's General Data Protection Law (LGPD, Federal Law No. 13,709/2018).

What we do not request directly

Outside the contact form, BuzuRadar does not request the following user data:

• Phone numbers or identity documents
• Your geographic location
• Individual browsing history, user profiles, or personal behavior
• Login or authentication data (there are no user accounts)
• Payment or financial data

Temporary technical data

Like any web server, our system temporarily processes technical information needed to respond to HTTP requests, such as IP addresses and browser headers. This data is used exclusively to:

• Deliver requested content to the correct browser
• Apply request rate limits to protect the service
• Keep minimal technical logs for security, availability, and diagnostic purposes
• Generate aggregate usage and performance metrics when Cloudflare Web Analytics is enabled

Technical logs maintained by BuzuRadar are not associated with user profiles. They may include an IP address, HTTP method, requested path, response status, and request duration. Retention must be limited to what is necessary for security, operational investigations, and compliance with legal obligations. Cloudflare Web Analytics metrics are aggregated and described in the next section.

Contact form data

When you send a message through the contact page, we process your name, email address, selected subject, and message to receive, review, and respond to your request. Submission is voluntary, and this data is delivered through Web3Forms, which provides the form service under its own privacy policy.

Bus fleet data

BuzuRadar displays public bus fleet data provided by the SMTR, the Rio de Janeiro Municipal Department of Transportation. This public-domain data does not contain personal information about passengers or drivers.

Summary by category

• Contact form: name, email address, subject, and message submitted voluntarily; used to receive and respond to requests; delivery processed by Web3Forms.
• Public fleet data: displayed for public transparency; sourced from SMTR; does not identify website users.
• Technical logs: IP address, path, method, status, and duration; used for security, rate limiting, and diagnostics under the legal bases of legitimate interest and service delivery.
• Aggregate analytics: loaded only after consent when enabled on the website; used for usage and performance metrics.
• Advertising, cookies, and identifiers: used only under applicable consent and permissions; processed by Google and, when active, Media.net and Meta under their own policies.
• iOS app technical events: when sent by the app, they may include version, build, approximate operating system, device class, component, technical reason, and limited diagnostic metadata.
• App Attest: the backend may retain a key identifier, public key, monotonic counter, and technical dates to validate app integrity and prevent abuse.

We retain technical data for the shortest period compatible with service operation, security, failure investigation, and legal obligations. The windows below may be reduced through operational configuration but must not be extended without a new necessity review.

• Contact messages: retained only as long as needed to respond, follow up on the request, and meet applicable legal obligations; Web3Forms applies its own retention policy.
• Technical observability events: standard operational retention of up to 90 days.
• App Attest: inactive keys may be removed after 365 days without use; compromised keys may be revoked or removed sooner.
• Server technical logs: retained only for the period needed for security, diagnostics, and service continuity.
• Public fleet data: preserved while needed for transparency, civic auditing, and the operation of the public history.

Where applicable, deletion requests are assessed in light of the technical nature of the data, its security purpose, and whether the record can be reliably identified without collecting unnecessary additional data.

BuzuRadar may use Cloudflare Web Analytics to measure page views, traffic sources, and real-world browser performance in aggregate, and PostHog on the server to measure completed actions and diagnose exceptions.

How it works

When enabled and after you consent, the website loads a small JavaScript beacon hosted at static.cloudflareinsights.com with the public token for the Web Analytics property. Because BuzuRadar's domain is proxied through Cloudflare, we use a manual installation in the website code and keep Cloudflare's automatic setup disabled to avoid counting page views twice.

PostHog runs only on the server and does not install browser scripts, cookies, or local storage. Product events are sent without person profiles, search terms, license plates, or vehicle identifiers; the IP address is removed before sending.

Data processed

These metrics help us understand product health and performance, including visited pages, referrers, browser type, operating system, approximate country or region, and Web Vitals. They also cover completed route searches, line page views, licensing lookups, audit analyses, and generated reports. BuzuRadar does not use these metrics to create individual profiles, sell data, or identify users.

Cloudflare Web Analytics does not rely on BuzuRadar's own cookies. Cloudflare may process technical data needed to provide the service under its own privacy policy.

Your controls

You can block the Cloudflare beacon through your browser settings or privacy extensions. You can also reject or revoke consent on this page. The map and public pages remain available even if the beacon is blocked.

To keep BuzuRadar free and operational, we may display non-intrusive ads provided by advertising networks. Ads appear in no more than three positions per page and never block the main content. When advertising is enabled, its script is loaded only after consent to non-essential features.

iOS app, IDFA, and ATT

In the iOS app, Google AdMob measures and serves ads and may mediate demand from Media.net and Meta Audience Network. Before allowing tracking across apps and websites, BuzuRadar presents the applicable privacy choices and requests Apple's AppTrackingTransparency (ATT) permission. Permission is optional: if you decline, the app remains available and may show only permitted contextual ads, without using the IDFA for tracking or personalization.

When authorized, partners may use the IDFA and technical device signals to personalize, limit frequency, prevent fraud, and measure ads and impression revenue. BuzuRadar does not include search text, a viewed transit line, precise location, its own device identifier, or an ad response identifier in these measurement events.

Advertising cookies

Advertising networks may use cookies and similar technologies to measure or display ads. These cookies are managed by the advertising networks, not BuzuRadar. They may include:

• Session cookies: expire when you close your browser
• Persistent cookies: remain for a defined period to personalize ads
• Tracking pixels: used to measure ad effectiveness

How to manage cookies

You can control and disable cookies in your browser settings:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

You can also opt out of personalized advertising through the Digital Advertising Alliance or the Network Advertising Initiative.

Consent in this browser

You can accept or reject non-essential features. Your choice is stored only in this browser and can be changed at any time.

The website may use Google AdSense, while the iOS app uses Google AdMob. AdMob may mediate Media.net and Meta Audience Network when those partnerships are active.

How Google AdSense works

Google AdSense may use cookies and similar technologies to measure ads, limit frequency, and personalize displayed ads according to Google and user settings. On BuzuRadar, AdSense loads only with consent when advertising is enabled.

Data processed by partners

BuzuRadar does not send account, login, or user-submitted data to Google AdSense. Google Media.net, and Meta may independently process data through their own technologies under their privacy policies:

• Google
• Media.net
• Meta

Disable personalized Google ads

You can disable Google's use of cookies for personalized advertising in Google Ads Settings. On iOS, you can also decline or revoke tracking in Settings > Privacy & Security > Tracking without losing access to the app.

BuzuRadar is committed to complying with Brazil's General Data Protection Law (LGPD, Federal Law No. 13,709/2018), which governs the processing of personal data in Brazil.

Legal basis for data processing

Because BuzuRadar does not maintain user accounts, we limit processing to what is necessary to operate the service and respond to voluntarily submitted messages. Contact details, IP addresses, technical logs, and third-party cookies or identifiers may be personal data under the LGPD, so we follow these practices:

Cookies and consent

Cloudflare Web Analytics does not rely on BuzuRadar's own cookies. Cookies used by Google AdSense and other third-party identifiers may, however, constitute personal data processing under the LGPD. BuzuRadar does not treat continued browsing as consent to load these non-essential features.

You can withdraw consent at any time using the controls on this page, disabling cookies in your browser settings, or using the opt-out tools mentioned in the previous section.

Under the LGPD, you have the following rights regarding your personal data:

• Confirmation and access: learn whether we process your data and access it
• Correction: request correction of incomplete or inaccurate data
• Deletion: request deletion of unnecessary or unlawfully processed data
• Portability: receive your data in a structured format
• Withdrawal of consent: withdraw consent at any time
• Objection: object to data processing in certain circumstances

Because BuzuRadar does not maintain user accounts, requests related to contact form messages should include the email address used for submission so the record can be located. For rights related to Google AdSense cookies, see the Google Privacy Policy. For technical data processed by Cloudflare, see the Cloudflare Privacy Policy.

If you have questions about this Privacy Policy or BuzuRadar's data processing, email [email protected].

For privacy and data protection matters, you may also contact Brazil's National Data Protection Authority (ANPD) through its website at www.gov.br/anpd.