Privacy Policy
Last updated: 28 July 2026
ToiletNearMe Australia is a free public toilet directory. This policy describes exactly what the site does with information about you. It is written to reflect how the site is actually built rather than to cover things we might do one day, and we handle personal information in line with the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth).
In short: you do not need an account, we do not sell data, we do not run ads or any advertising network, and we do not build profiles of visitors.
What we collect
Analytics
Every page loads Google Analytics 4 (measurement ID G-2B6Y19YS1V). It sets cookies in your browser (typically _ga and _ga_<container>) and reports to Google: the pages you view, the page or search that referred you, your approximate location derived from your IP address, and basic device, browser and language details. Google Analytics 4 does not log full IP addresses in reports. We use this only to see which suburbs and pages people find useful. We do not use analytics data to identify individuals.
You can opt out by installing Google’s Analytics opt-out browser add-on, by blocking analytics cookies in your browser settings, or by using a content blocker. Blocking analytics does not affect any feature of this site.
Contact form
The contact form asks for your name, email address and message. When you submit it:
- The message is emailed to our own inbox through Resend, our email delivery provider. It is not written to any database, and there is no stored record of submissions on this site.
- Your IP address is recorded in memory on the server to rate limit submissions (three per hour) and is included at the bottom of the email we receive, so we can identify abuse. The rate limiting record is temporary and is not persisted.
- Your email address and IP address also appear in our server logs for that request, which our hosting provider retains for a short period.
- We reply to the address you give us and keep the email thread in our inbox for as long as it is useful to answer you. Ask us and we will delete it.
Please do not send us sensitive information (health, government identifiers, financial details) through the contact form. We do not need it.
Spam protection (Cloudflare Turnstile)
The contact form is protected by Cloudflare Turnstile, which runs a bot check in your browser. Loading the Turnstile widget and verifying its result sends your IP address and basic browser signals to Cloudflare. Cloudflare states that Turnstile is privacy-preserving and that it does not use the data it collects for tracking or advertising purposes. If you block the Turnstile script, the form will tell you and you can email us instead.
Your location
The site asks your browser for your location so it can sort toilets by distance and power the “Near Me” feature. Your browser will always prompt you first, and you can refuse or revoke the permission at any time in your browser or device settings. If you refuse, the site still works and simply sorts results a different way.
If you allow it, your coordinates are held in your browser for the session — they are never stored in a cookie or in local storage, and they are not written to any database or attached to any profile. When you sort or search by distance, your coordinates are sent as query parameters to our database (hosted by Supabase) so the nearest-toilet query can be calculated there. Those queries are not retained as a location history of you.
Maps
Map tiles are loaded from OpenStreetMap. When a map is displayed, your browser requests those tiles directly, so OpenStreetMap’s servers receive your IP address and the map area being viewed.
Server logs and site optimisation
Like any website, our hosting provider records standard request logs (IP address, time, page requested, user agent) for security, abuse prevention and diagnostics. We also load a third-party SEO optimisation script from SearchAtlas, which runs in your browser and can therefore see your IP address and the page you are on.
What we do not collect
- No accounts, sign-ups or passwords for ordinary visitors.
- No advertising, ad network, retargeting pixel or advertising identifier.
- No payment details — the site is free and takes no payments.
- No sale, rental or trade of personal information to anyone, ever.
Who we share information with
We do not disclose personal information except to the service providers that make the site work: Google (analytics), Resend (delivering contact form email), Cloudflare (bot check), Supabase (database hosting), OpenStreetMap (map tiles) and our web host. Some of these providers store or process data outside Australia, including in the United States, so by using the site or contacting us you accept that your information may be handled overseas by them under their own privacy terms. We may also disclose information where the law requires it.
Cookies
A short list of the cookies this site actually sets is in our Cookie Policy.
Children
The site is a general-audience directory and is not directed at children. We do not knowingly collect personal information from children.
Security
The site is served over HTTPS and administrative areas are password protected. No online service can promise perfect security, but because we hold so little personal information there is very little about you for us to lose.
Your rights
Under the Australian Privacy Principles you can ask us what personal information we hold about you, ask us to correct it, and ask us to delete it. In practice the only personal information we are likely to hold is an email thread you started. Send privacy requests through our contact page with “Privacy request” in your message and we will respond within 30 days.
If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes to this policy
If we add a feature that changes what we collect — advertising, accounts or stored reviews, for example — we will update this page and change the date at the top before that feature goes live.