Privacy

Last updated October 12, 2026.

Who is responsible

NYCSubMap is operated by InfoTilt, Inc., 72 Van Reipen St #353, Jersey City, NJ 07306, United States, which is responsible for (the data controller of) the personal information described here. Contact: info@nycsubmap.com.

The short version

A record of the trips you look up is a record of where you go. We treat it that way.

• If you are not signed in, your searches are stored with no link to you — no account, no IP address, no session identifier. Just the pair of stations, so we know which routes people care about.
• If you are signed in, your searches are attached to your account so you can see them, re-run them, and delete them. We keep the last 100.
• You can delete your whole trip history from Recent trips, and deleting removes the rows. There is no archived copy.

What an account stores

• Your email address and name, so we can sign you in and email you about your routes.
• The routes you have saved, their labels, and when you asked to be told about problems.
• A log of which alert emails we have sent you, which is what stops us sending the same one twice.

We do not sell any of it, and we do not share it with advertisers.

Signing in with Google

You can create an account or sign in with your Google account instead of a password. If you do, Google tells us your name, your email address, whether Google has verified that address, and a permanent account number Google uses to recognise you. We ask for nothing else: not your contacts, calendar, location or Google Drive, and we never see your Google password. We store the account number so we can recognise you next time, and use your name and email exactly as we would if you had typed them in. If an account here already uses the same verified email address, the two are joined so you do not end up with two accounts. You can stop it at any time from your Google account's security settings (myaccount.google.com/connections); your account here then works with a password, which you can set with “Forgot your password?”.

Addresses and places you type

You can start or end a trip at a street address, a landmark, a neighborhood or a ZIP code instead of a station. Landmarks, neighborhoods and ZIP codes are matched on your device: your browser downloads our public list of places once and searches it locally, so what you type is not sent to us.

Street addresses are looked up as you type, once what you have typed looks like an address (a number and a word), and again if you press “Get directions”. Your browser then sends the text you typed directly to GeoSearch, a free address service run by the New York City Department of City Planning, and gets back the address's position. That request goes from your browser to the City, not through our servers, and we never receive the address. The City's own privacy policy applies to it. The nearest stations are then worked out on your device, the same way as for “near me”.

Station names you search for are sent to us, because the station search runs on our server; like any page request they can appear in our web server's logs. Anything that starts with a number — which may be the start of a street address — is not sent to that search; it is matched against the station list in your browser instead.

Directions between two addresses. When you plan from or to an address, your browser works out which stations are within walking distance and how long each walk is, and sends us only those station names and walking times. We never receive the address or its position, so it cannot appear in our logs or in your trip history; your history records the stations you rode between. Addresses are also left out of the page's web address, so a shared or bookmarked link does not contain them.

Recent places. To save retyping, the trip planner remembers the last dozen starts and destinations you planned and suggests them as you type. They are stored in your browser on this device only (its local storage) and are never sent to us. “Clear recent places”, at the bottom of the suggestions list, forgets them; so does clearing this site's data in your browser.

Your location

Two places on this site can use your location: the “use my location” button beside the trip planner, and the stations near me page. Both ask your browser for permission first, and neither works until you grant it.

Your coordinates are never sent to us. When you press either button, your browser downloads the list of station positions — the same public list behind the map — and does the distance arithmetic on your device. Your position is compared against that list locally and then discarded. It is not transmitted, not logged, not stored, and not attached to your account, whether or not you are signed in.

This is deliberate. The ordinary way to build the feature is to send your latitude and longitude to the server and let it sort the list. That would put your exact position in our web server's access log every time you pressed the button, which over time is a record of where our users physically stood. The calculation is small enough to do in a browser, so there is no reason for us to ever receive it.

Advertising

This site is paid for by ads served through a third-party ad network. That network may set its own cookies and may use them to choose which ads to show. We do not pass it your account, your saved routes, or your trip history. Your browser and your ad provider's own settings control what it is allowed to do.

Email

We email you for three reasons: confirming your account, resetting a password, and telling you about a problem on a route you asked us to watch. There is no newsletter. Alerts can be turned off per route, or entirely, on My saved routes.

Deleting your account

Write to info@nycsubmap.com and we will delete the account, the saved routes and the history together.