Privacy
MyMetro · last updated 15 October 2026
In short: MyMetro shows your calendar as a metro departure board. It only reads your calendars, never changes them, and keeps what it reads on your device. There are no accounts, no ads and no analytics, and nothing is sold or shared.
Who runs MyMetro
MyMetro is run by Adrian Thomas, who is the data controller for the little personal data that reaches this site's server (described below). Contact: privacy@mymetro.io.
What the app reads, and why
| If you connect | What's read |
|---|---|
| Microsoft Outlook |
Your name and email (to show whose calendar it is) and your calendar events, read-only (User.Read,
Calendars.Read).
|
| Google Calendar |
Your name and email and your calendar events, read-only (calendar.readonly,
openid, email, profile).
|
| A calendar link | The calendar published at the link you paste (for example an iCloud or Outlook public calendar). |
| A calendar file | The .ics file you choose. It never leaves your device. |
Events are used only to draw your board, timetable, travel card and map, and for the reminders you turn on.
Where it's kept
- On your device only. Your settings, calendar links, the sign-in tokens from Microsoft and Google, and an offline copy of your events are stored in your browser. Removing a calendar, signing out or clearing the site's data deletes them.
- Outlook and Google are read directly from your browser with Microsoft's and Google's own sign-in. Your events and tokens don't pass through any server of ours.
-
Calendar links are fetched for you by this site's own server (a Cloudflare Worker), because calendar
hosts don't let web pages read them directly. It passes the calendar straight back to your device and doesn't store the
link or the calendar. To spare the calendar host, Cloudflare's cache may keep a copy of the calendar for up to 5
minutes, filed under a scrambled form of the link. The server logs only the calendar host's name (for example
icloud.com) if a fetch fails, never the link.
Crash reports
If the app hits an error on your device, it sends a short technical report to this site's server so the error can be
fixed: the error message, where in the code it happened, the page (without anything after
? or #), the app version and the kind of error. It contains no events, links, names or tokens.
Reports are kept in Cloudflare's logs for up to 7 days, then deleted.
The legal basis
- Reading your calendars happens because you ask for it, by connecting a calendar or adding a link or file: it's needed to provide the app to you.
- Crash reports, security logs and rate limits (which use your IP address briefly, to stop anyone overloading the calendar-link service) rely on legitimate interests: keeping the app working and safe. The IP address isn't stored.
How long things are kept
- On your device: until you remove the calendar, sign out or clear the site's data.
- A fetched calendar link's calendar in Cloudflare's cache: up to 5 minutes.
- Crash reports and server logs: up to 7 days.
Cookies and storage
The app uses your browser's storage only for what it needs to work (your settings, calendars and sign-in), not for tracking. There are no analytics or advertising cookies, so there's nothing to consent to.
Google user data
This section covers what MyMetro does with data from your Google Account when you choose Connect Google Calendar. Nothing is read from Google unless you connect it.
What is accessed
-
Your calendar events, read-only (
https://www.googleapis.com/auth/calendar.readonly): each event's title, start and end time, location, meeting link, organiser, attendees and their replies, whether it was cancelled, and which of your calendars it's on, for this week and the week ahead. Event descriptions are not read. - Your list of calendars (names and colours), so you can choose which ones show.
-
Your name and email address (
openid,email,profile), to show which Google account is connected.
MyMetro never creates, changes or deletes anything in your Google Calendar, and asks for no other Google data.
How it is used
Only to show your own calendar back to you inside the app: your upcoming events as trains on the departure board, the weekly timetable and travel card, the map of your day, and the reminders you turn on. It is not used for advertising, profiling, selling, training AI or machine-learning models, or anything other than showing you your calendar.
How it is shared
It isn't. Your Google data is not shared with, transferred to or sold to anyone, and no person reads it. The app talks to Google directly from your browser, so your Google data and sign-in token never pass through any server run for Metro Calendar.
How it is stored and protected
On your device only, in your browser's storage for this site: the short-lived access token Google issues (it expires within an hour) and an offline copy of your upcoming events, so the board works without a connection. Everything travels over HTTPS, and the site's security policy only lets the app talk to Google's own sign-in and Calendar addresses.
How long it is kept, and how to delete it
Until you disconnect Google in Settings › Calendars, sign out, clear this site's data or uninstall the app: each of these deletes the token and the copy of your events from your device at once. The offline copy is also replaced every few minutes and discarded after 24 hours. To remove MyMetro's access from your Google Account as well, go to myaccount.google.com/permissions.
Limited Use
MyMetro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Who else is involved
- Cloudflare hosts the app and runs its small server (calendar links, crash reports).
- Microsoft and Google, only if you sign in with them, under their own privacy policies.
Data outside the UK and EU
Cloudflare, Microsoft and Google may process data in other countries, including the United States. They do so under the UK–US data bridge, the EU–US Data Privacy Framework and standard contractual clauses in their data processing terms.
Children
MyMetro isn't meant for children under 13.
Your choices
- Disconnect Outlook or Google, or remove a calendar link or file, in Settings › Calendars.
- Revoke access from your account too: Microsoft at myapps.microsoft.com, Google at myaccount.google.com/permissions.
- Clear everything by clearing this site's data in your browser, or uninstalling the app.
Your rights
You have the right to ask what personal data is held about you, to have it corrected or deleted, and to object to its use; email privacy@mymetro.io. Almost everything lives on your own device, where you can delete it yourself at any time. You can also complain to the data protection regulator where you live: in the UK that's the Information Commissioner's Office.
Contact
Questions or requests: privacy@mymetro.io.