Privacy and personal data

What is stored in your browser

Your selected line filters and light or dark colour theme are stored locally so that the website can remember them. Website files and map tiles may also be stored in the browser cache for faster loading and limited functionality without a network connection.

Your analytics choice is stored under the name sl-live-analytics-consent-v1, together with the time and policy version. The choice remains valid for no more than 90 days. When it expires, analytics stops and the website asks again when the page is active. Withdrawing consent also applies to other open tabs on the same website.

You can delete this information by removing website data for sllive.se in your browser settings.

Your location

When you actively choose the map's location button, “Stops near me” or “My location” in the journey planner, the browser may ask for access to your position. Your position is used only for that action: to centre the map, find nearby stops or plan the journey.

Nearby stations are calculated in your browser. When you use your location in a journey search, the coordinates are sent through SL Live's services to SL's journey planner. Your exact position is not saved in browser storage or analytics events, or used to build a location history. Maps, journey suggestions and results, and the nearby-station list are excluded from session replay.

Searches and journeys

When you search for a station, address or journey, the information is sent through SL Live's services to the data sources required to answer the search. We do not build a search history linked to you. Searches containing an address or coordinates are not placed in a shared result cache.

Technical data and service providers

SL Live uses Cloudflare for the website and API services, Trafiklab and SL's open APIs for transport information, and OpenStreetMap-based maps. These providers may process technical information such as IP address, browser type, time and requested resource for security and operation.

SL Live does not use advertising or Google Signals and does not enable Google's advertising personalisation features.

Optional website analytics

If you choose “Allow analytics”, Google Analytics 4 loads with measurement ID G-MK1SEJWBZZ and PostHog with project token phc_quwhKU7qihkixQmfGWC3idE8KPWFBi6tWY5pJGRkPXDs. The legal basis is your consent. The purpose is to understand which pages are used and how the service works in practice. The analytics services may then process client and session IDs, page views, device, browser, the IP address used for transmission and approximate geography.

After you consent, the first-party cookies _ga and _ga_MK1SEJWBZZ may be set to distinguish visits and sessions. SL Live limits their lifetime to no more than 90 days. The website's page view sent to Google Analytics removes query strings and URL fragments from the page address; a referring page is limited to its website origin, without its path or search details. Google processes analytics data under Google's Privacy Policy.

PostHog uses first-party cookies and browser storage with names containing posthog or the project's token. Cookies have a lifetime of no more than 90 days. Local storage has no built-in expiry: it is cleared when you withdraw consent or the website detects that your analytics choice has expired. If you do not return, it may remain until you or your browser clear it. The identifiers can connect visits; they are not fully anonymous data.

SL Live uses PostHog's EU environment at eu.i.posthog.com. The page address in page-view and page-leave events is sent without query strings or URL fragments, and their referrer fields are removed. After you consent, session replay may record other visible page content, clicks, pointer movements and scrolling. All input fields are masked. Maps, journey suggestions and results, and the nearby-station list are excluded from recordings entirely. The recording's page address is also sanitised, but this does not mask all text and links on the page. Console logs, network content and network performance details, and canvas recording are disabled in the website's settings. Automatic click and form collection and automatic page views in PostHog remain disabled. Read more in PostHog's Privacy Policy.

Recipients of analytics data are Google Ireland Limited, PostHog and their subprocessors. Processing may take place under the safeguards described in Google's Data Processing Terms and PostHog's Data Processing Agreement. Google Signals, advertising features and ad personalisation are disabled.

Analytics is off by default, and neither the Google tag nor the PostHog SDK loads before you agree. You may decline without affecting website functionality and can change or withdraw your choice at any time. When consent is withdrawn, further collection stops and analytics storage is cleared as far as the browser allows.

Change analytics choice

Privacy questions

SL Live is responsible for the processing described here. For questions, correction, deletion or withdrawal of consent, use the contact details on the About SL Live page. You can read more about your rights and submit a complaint to the Swedish Authority for Privacy Protection.