Privacy notice

Who operates the service

TfL Refund Dashboard is an independent UK-based project. It is not operated by, endorsed by or affiliated with Transport for London.

For privacy questions, access requests or account deletion requests, email support@tfl.taricone-solutions.com.

Information we process

When you stay signed out

Imported journeys, claim statuses, settings and calculated results are stored in your browser's local storage. They are not saved to our account database. Route details may be sent to TfL's public journey APIs to calculate expected journey times.

When you create an account

• Your email address and authentication identifiers.
• Journey dates, routes, times, fares, card labels or Oyster identifiers, claim statuses and saved expected times.
• Settings you choose to save, including an optional date of birth and Railcard status used for savings estimates.
• Subscription status and Stripe customer or subscription identifiers. Full payment-card details are handled by Stripe and are not stored by this service.

When you forward an email

We process the sender, recipient, message content and supported CSV attachments needed to match TfL journeys or claim outcomes. We do not access your mailbox; we receive only messages sent to your personal forwarding address or to support.

Why we use the information

• To provide the service you request: importing journeys, calculating delay indicators, syncing account data, tracking claims and managing subscriptions.
• For our legitimate interests: securing the service, preventing abuse, diagnosing failures and improving reliability, balanced against your rights.
• With consent where required: advertising cookies or similar storage. Advertising remains disabled unless the required consent controls are active.
• To meet legal obligations: where records must be retained or disclosed by law.

You do not have to create an account or provide a date of birth. Without an account, cross-device sync and paid automation are unavailable. Without a date of birth, age-based Railcard estimates are not shown.

Service providers and transfers

The service uses Amazon Web Services for hosting, account authentication, databases and inbound email processing; Stripe for subscriptions; and TfL APIs for journey and disruption information. Google AdSense may be used for free-tier advertising after approval and only with the required consent controls.

These providers may process information in the UK, EEA or other countries under their contractual and legal safeguards. They process information for the services they provide and under their own privacy terms where applicable.

How long information is kept

• Signed-out data remains in your browser until you delete it, clear site storage or remove the browser profile.
• Account journey data remains until you delete journey data in the dashboard or ask us to delete the account, subject to backups and legal requirements.
• Raw forwarded emails are automatically deleted from temporary email storage after 30 days. Parsed journey and claim data follows the account retention period.
• Operational and security logs are retained for limited periods appropriate to troubleshooting and abuse prevention.
• Stripe keeps billing records according to its policies and applicable law.

Cookies and local storage

The dashboard uses browser storage for journey data, preferences, sign-in tokens and secure login flow state. These are necessary for the requested features. If Google advertising is enabled, Google and its partners may use cookies or similar identifiers as described in Google's policies; a Google-certified consent platform will be used where required.

Your rights

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase, restrict or receive a copy of your personal data, and to object to certain processing. You can export or delete journey data from Account > Backups & data. For account-level requests, contact support.

You may object at any time to processing based on legitimate interests. You may also complain to the Information Commissioner's Office.

Security and changes

We use encrypted HTTPS connections, private cloud storage, account authentication and restricted service access. No online service can guarantee absolute security, so export a backup if the data is important to you and keep your account credentials private.

We may update this notice when the service or legal requirements change. The date at the top will show the latest revision.