PRIVACY
Privacy notice
Plain English. No dark patterns.
What we collect
- Email + route fields, only if you submit the fare-watch or contact form.
- Anonymous server logs (IP, user agent, requested path) retained 30 days for security.
- localStorage key
tsb_receipt_v1(the cookie banner acknowledgement) and your last route.
What we do not collect
- No behavioural ad pixels (no Meta Pixel, no Google Analytics, no LinkedIn Insights).
- No card data, ever. Bookings happen at the partner site.
- No biometric identifiers — relevant under Illinois BIPA (740 ILCS 14).
Your rights
Illinois residents and residents of CCPA-covered states (CA, CO, CT, VA, UT, more) can request deletion of any data we hold by emailing vault@tripsaverbank.com. We respond within 30 days.
Jurisdiction
This service is operated from Cook County, Illinois, USA. Disputes are governed by Illinois law.