Privacy

Controller

Who is responsible

The controller is Tube Hound, operating the website tubehound.co.uk. For privacy requests, including access, correction, or deletion, email hello@tubehound.co.uk.

We comply with the UK General Data Protection Regulation, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations 2003 (PECR). The Friday 4pm Brief is a service email you opt into. We do not drop third-party advertising pixels, and we do not set analytics cookies.

Friday 4pm Brief

The weekly email

If you subscribe on the homepage, we store your email address in the SQLite subscribers table. That address is used solely to send the Friday 4pm Weekend Tube Closures & What's On Brief. We do not sell it, append it to an advertising audience, or share it with an ad network.

Lawful basis: consent, including PECR consent for this electronic mail. Unsubscribe instantly by replying to a brief or by emailing hello@tubehound.co.uk. We then delete the address from subscribers.

Optional location

“Here” and “near me”

Location is optional. If you say “here” or “near me”, or otherwise ask from this phone’s position, the browser may share coordinates for that single turn. Those coordinates are used in memory only, to resolve the nearest station, and are then discarded. They are never stored with your email, a session, or any other personal identifier.

Ask Tube Hound

Chat messages and OpenRouter

Questions you type, and the replies, are processed so the next message in that conversation still makes sense. The text is sent to OpenRouter for large-language-model processing, which returns the answer you see. OpenRouter acts as a processor for that request. A copy of the conversation is kept in our own SQLite chat store under the session id your browser already holds, so the thread can continue. There is no Tube Hound account.

Lawful basis: steps you request before and during the service (UK GDPR Article 6(1)(b)). Email hello@tubehound.co.uk if you want a session deleted.

Rate limits and telemetry

Daily salted SHA-256 hashes

Requests to /hound/* and /hound/mcp are counted in memory so the service stays available. The record kept for rate-limit review and operational telemetry is a daily salted SHA-256 hash of the client key, not the raw address. The salt is the UTC date, so a hash from one day does not match the next. Query notes written beside the hash have email addresses redacted.

Lawful basis: legitimate interests in keeping the API within its published limits and understanding whether answers are slow or failing (UK GDPR Article 6(1)(f)).

Your rights

Access, correction, deletion

You can ask for a copy of your personal data, a correction, erasure, restriction, or object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time. You can also complain to the Information Commissioner’s Office (ico.org.uk). Write to hello@tubehound.co.uk and we will respond.