Privacy policy

Who we are

AllCoach is an independent project run by an individual, not a company. It is free to use and has no adverts. Questions about your information: privacy@allcoach.co.uk. For anything else: hello@allcoach.co.uk.

Cookies

We use one cookie, and only for security:

• ac_js holds only the value "1" and lasts 30 days. Our pages set it in your browser to show that it runs our pages normally. Programs that copy the site automatically usually never get it. When the site is being copied, our delivery network, Cloudflare, shows a short security check to visitors who don't have this cookie and didn't arrive from another website, so real visitors are almost never asked. It contains nothing about you, is not used to recognise you and is not shared. Because it is strictly necessary to protect the site, it does not need your consent, but you can delete it at any time in your browser.
• Cloudflare's own security cookie (cf_clearance) is set only if you are shown one of those security checks, so that you are not asked again. See Cloudflare's cookie policy.

We do not use cookies for advertising, analytics or following you around the web.

What stays on your own device

A few small items are kept in your browser's storage, on your device only. We cannot see them unless you press a button that uses them.

• Your area (called allcoach.place): the town or postcode you last chose, kept as you typed it, its map position and the distance you picked, kept only in your own browser and never sent to us to store. It lets the site fill in boxes for you and show your nearest pick-up. The "Change" button at the top of the page replaces it, and "Forget my location" inside it clears it. On a destination or event page it also means we show only trips picking up near that town: the town's name is part of the page address, nothing else about you is. To work out dates and pick-ups for your area, your browser asks us about that town; we do not store the answer or log it.
• Your shortlist (called allcoach.shortlist), the trips you tapped "Save" on. When you open your shortlist, the names of those trips are sent to us so we can show them; we do not keep them.
• Which pages have dates for your area (called allcoach.clean): a list of destination, event and attraction names that have a dates page for the town you chose, kept for a day so a link can take you straight there. It holds no personal information beyond your town's name, the same for everyone who picks that town, and "Forget my location" clears it.
• Which pages you chose to see unfiltered (called allcoach.everywhere, kept in this browser tab's session storage only): when you tap "See trips from everywhere", the tab remembers it for that page until you close the tab or change your area.

You can clear all of these at any time in your browser's settings (clear site data).

What happens when you search

When you type a town or postcode, it travels in the web address (for example /leaving-near-me?from=CV1) so we can show trips near you. We use it only to answer that search. To turn a postcode or town into a place on the map we ask postcodes.io, a free public lookup service, which receives the postcode or town you typed (not your name or any other detail about you). We never save the postcode you type and we do not put it in our logs.

To improve the site we count which town or postcode area people search from (for example "Walsall" or "WS1", never the full postcode), which of our pages they searched on and, when we cannot find a place, the words typed (so we can add missing towns and spellings); this is never linked to you, your IP address or your visits, and we keep it for 90 days.

In the same way, when you search for trips we count what was searched for (the words typed and the filters chosen, such as dates, kind of trip or price) and how many trips we found, so we can see what people look for and what we are missing; words that look like an e-mail address, phone number or street address are not kept, and a full postcode is cut to its area. This is never linked to you, your IP address or your browser, and we keep it for 90 days.

If you press "Use my location", your browser asks your permission first. The coordinates it gives are sent to us in the web address to find pick-up points near you. We do not save them.

What we keep

• Visit counts. When a page has been open for a couple of seconds (or you scroll, tap or click), a tiny script on our own site tells us five things: the kind of page (for example a trip, a destination or the home page), whether you are on a phone, tablet or computer (from the width of your window), and roughly where you came from (Google, Bing, DuckDuckGo, Facebook, an AI assistant such as ChatGPT, another website, one of our own pages, or straight to us), and whether the page arrived without our security cookie (see Cookies). That is all it sends. With it we note whether your browser carries Cloudflare's security cookie, which tells us whether a real visitor was shown a security check. This is how we make sure the checks stop automated copying and not people. The script itself sets no cookies, does not use your browser's storage and does not look at your screen, fonts or anything else about your device. If your browser sends "Do Not Track" or "Global Privacy Control", the script sends nothing at all and we do not count you.
• Taps on Save. Your shortlist stays in your own browser. When you tap Save (or tap again to remove a trip), we note which trip, whether it was saved or removed, the kind of page you were on, and the date and time, so we can see which trips people want to keep. Nothing is sent if your browser asks not to be tracked. In the same way, when you press "Show more" on a list we note the page, whether you had given a place, and the date and time, so we can see how people use long lists.
• Click-throughs. When you press the button to the coach company's website, we note which trip, the date and time, the page of ours you were on, and which website you came from, so we can see which trips are useful. The click-through log itself holds no IP address, device or postcode, and nothing from the web address beyond the page name.
• For 14 days only: IP address and browser name. Alongside each visit count, click-through, Save tap and "Show more" press we keep, for 14 days, your IP address, your browser's name and version (the "user agent"), the country (if our delivery network tells us), the page name (never anything after a question mark), the kind of page, phone or computer, and where you came from. We keep these only to tell real people from automated visitors (search engines, scrapers, scripts) and to protect the site from abuse. After 14 days they are deleted automatically, and the daily totals are all that remain.
• Daily totals, kept for good. For each day we keep only numbers: how many page views and how many different visitors, split by kind of page, phone or computer, and where from, plus how many click-throughs. A "different visitor" is counted with a one-way code made from your IP address and browser name mixed with a secret that is made fresh each day and thrown away when the day ends. The code is not kept after the day, so we cannot recognise anyone from one day to the next, and the totals contain no IP addresses or browser names.
• A technical log with one line per page request: time, page name (without anything after a question mark), result and how long it took. It has no IP address and no postcode. For individual trip pages it also notes whether our security cookie came with the request, and a scrambled code made from your network address and browser name. The code is made with a secret that changes every day and is never stored, so it cannot be turned back into an address or linked from one day to the next. It only lets us see when one program loads many trip pages without running our pages normally. The log helps us spot faults, slow pages and automated copying.

Why we are allowed to do this: our legitimate interest in understanding how the site is used and in protecting it from abuse and automated copying. We do not use the information to identify you, to build a profile of you, to show you adverts or to make decisions about you. We do not sell it or share it with anyone, and it is not sent to any analytics or advertising company. You can object at any time by emailing privacy@allcoach.co.uk (the "Do Not Track" and "Global Privacy Control" browser settings already stop the counting without you having to ask).

Other companies involved

• Cloudflare delivers and protects this website. Like any such service it handles visitors' IP addresses to do that job. Cloudflare is the host and delivery network for this website, so it sees normal request data (IP address, browser type, the page asked for) as any web host does. Our own server sees your IP address in the way described under "What we keep" and deletes it after 14 days. See Cloudflare's own privacy policy.
• Coach company pictures. Many trip pictures are loaded straight from the coach company's own website into your browser, so that company's server can see your IP address, as it would for any picture. We ask your browser not to tell them which page you were on.
• Coach companies. When you leave AllCoach by pressing "View more details on the coach company's site", the coach company's own privacy policy applies from then on. Bookings and payments happen with them, never with us.
• postcodes.io, as described above.

Your rights

After 14 days we hold nothing that identifies you, so there is usually nothing to look up, correct or delete. Within those 14 days you can ask us to look up or delete the IP address and browser details we hold for you. If you think we do hold something about you, email privacy@allcoach.co.uk and we will help. You can also complain to the Information Commissioner's Office (ico.org.uk).

Last updated 27 October 2026.