TfL API keys

If you paste a key for live demos, it stays in this browser under tfl-user-api-key.v1. You can keep it for later visits or limit it to the current tab. Clear it from the same dialog that saved it.

A Board URL can carry the key in the hash fragment after #. The hash is not sent to this site's server. Anyone who opens that URL can use the key, so treat a shared Board link as secret if it includes one.

Keys are not sent to logs, analytics, or unrelated services from this app. Validation talks to api.tfl.gov.uk from the browser.

Visitor count

A first-party cookie named tfl_vid deduplicates the footer visitor count. It is a random id, not a login. Clearing site data removes it.

Other local data

Font preference and feedback drafts can also sit in localStorage. Component installs and GitHub stars are counted on the server from registry requests and the GitHub API, not from a tracker on every page.