Privacy Policy

We do not ask you to register. For a plain bin schedule lookup, we do not store your name, email address, or street address on our servers. We do not sell data to third parties because we have no useful data to sell.

When you look up a bin schedule, your address is sent to your council's waste system to fetch it. We keep a copy of the schedule for up to 60 days, filed under a code made from the address rather than the address itself. If you save an address, it lives on your device only.

There are two exceptions: bin day reminders, and reports you send us about a wrong bin night. If you choose to turn reminders on for a saved address, we do store that address on our server, because that is what lets us check it each night and notify you. This is entirely optional, off by default, and you can delete it at any time by turning reminders off in Settings.

If you tell us a bin night looks wrong, we store the address you looked up, the schedule we showed you and what you told us, so we can check it against your council. If you tap Yes to say it is right, we keep only your council and suburb. The Your data section below spells out exactly what is stored.

Two optional services also store your email address: reminders sent by email, and Plus, a paid subscription. Both are off unless you ask for them, and both are described below.

The only time you hand us contact details is if you choose to use the contact form, and even then only the details you type into it. The sections below spell out exactly where each piece of information goes.

The site uses Google Analytics to understand how many people visit and which pages they use, and it loads Google AdSense, which serves the ads that keep the site free. Both services are described in full below.

Street address during a lookup

When you search for a bin schedule, your street address is sent to two places: Mapbox (with OpenStreetMap Nominatim as a fallback) for autocomplete, and your local council's waste system to fetch the schedule. We keep a copy of the schedule that comes back for up to 60 days, so we can still answer when a council's website is down. It is filed under a code made from the address rather than the address itself.

If a lookup fails, our server log records the address searched for, and is kept for about 7 days. Our error report records the street name without the house number, the suburb and the postcode, and is kept for 90 days. Both exist so we can find and fix the problem.

Saved addresses

When you look up an address, it is written to your browser's localStorage under the key bnt_saved_addresses, so you can open it again from Settings. We keep your three most recent addresses (five with Plus), plus any with a reminder, and the oldest is removed when you look up a new one. This data never leaves your device and we cannot read it. You can delete it at any time from the Settings screen in the app or by clearing your browser data for this site.

Bin day reminders (optional)

Reminders are off by default and only apply to an address you explicitly turn them on for, on your results or in Settings. Turning a reminder on for an address stores that address (street, suburb, state, postcode), its map coordinates, your council, and a browser push subscription for this device, in our database, hosted by Supabase (see External services used below). No name, email, or account is required or collected for this.

You can also have a reminder emailed to you instead. Asking for one stores the same address details plus your email address, and we send one email asking you to confirm. Nothing else is sent until you click the link in it, and a request nobody confirms is deleted after 7 days. Each reminder email names your street and links to your bin night; it never names the bins. Every email has a link that stops them and deletes your email address straight away. Our emails carry no tracking pixel. When you follow a link in one, we note that the reminder is still wanted.

This data is used solely to check your bin schedule each night and, if you have opted in, send you a reminder the evening before collection or an alert if your schedule changes. Your subscription is identified by opaque, unguessable tokens rather than any personal identifier, matching how the rest of the app avoids accounts.

You can turn reminders off at any time from the Settings screen. Doing so deletes your address from our server immediately, not on a delay. A reminder also ends by itself if your browser stops accepting notifications, or if you have not opened the app for 12 months.

An emailed reminder ends when you use the link in any of its emails, if your email address stops accepting mail or marks us as spam, or if you have not followed a link in one of our reminder emails for 12 months. We email you two weeks before that happens.

Plus (optional, paid)

If you buy Plus, Stripe takes your payment. Your card details go to Stripe and never reach us. We keep a record of the subscription: your email address, Stripe's reference for you, which plan you chose, whether it is active, and when it renews. We use your email address only to send you sign in codes and messages about your subscription.

Each device linked to Plus holds a random code that proves it is yours. We store only a scrambled form of that code (a SHA-256 hash), never the code itself, and the date the device was last used. A six digit sign in code is also stored scrambled, works once, and expires after 15 minutes.

When you turn on a reminder from a Plus device, the reminder is linked to your Plus, and stores the reminder time you choose. We never show ads on a device with Plus: the device remembers that it has Plus, and checks with us each time the app opens.

When you buy, we also note which councils your saved addresses are in (never the addresses), so we know which councils to check by hand. When your subscription ends, we delete your Plus record, your linked devices and any sign in code.

Reporting a wrong bin night (optional)

Under each result we ask whether the bin night is right. If you answer Yes, we record only your council, your suburb and the date. No address is kept.

If you report that it is wrong, we store the address you looked up (street, suburb, state and postcode) and its map coordinates, your council, the collection dates we showed you, what you told us was wrong, any note you wrote, and the type of device and app version you used. We use this only to check and correct your council's schedule.

An email address is stored only if you type one in. We use it once, to tell you the outcome, and never for marketing. That email is sent through Brevo (see External services used below). Your IP address is used briefly to stop spam and is not stored with your report. To have a report deleted, ask us through the contact page.

Contact form

If you use the contact form, the message you write, along with your name and email address where you choose to provide them, is sent to us so we can read and reply. That delivery passes through Cloudflare Turnstile, which checks the submission is not spam, and lands in a private Discord channel that only the team can see. Supplying a name and email is optional, but without an email we have no way to reply to you.

Bin Night Tonight uses Google Analytics 4 (GA4) to understand how people use the site. This helps us see which councils are popular, which pages people visit, and whether new features are working.

GA4 collects aggregated, anonymised data including:

• Pages visited and time spent on each page
• Country and city-level location (not precise location)
• Device type, browser, and operating system
• How you arrived at the site (search, direct link, and so on)

GA4 uses cookies and device identifiers to count unique visitors over time. We have configured data retention in GA4 to 14 months. After that period, event-level data is automatically deleted by Google.

We also use Vercel Speed Insights, which collects aggregated, cookie-free performance metrics such as page load times and device type so we can monitor how fast the site runs. It does not set cookies and does not identify you.

You can opt out of Google Analytics tracking across all websites using the Google Analytics opt-out browser add-on. You can also manage or delete Google's cookies via your browser settings.

Bin Night Tonight is supported by advertising served through Google AdSense, which helps keep the bin night lookup free to use.

If and when ads run, Google and its advertising partners may:

• Set cookies and use device identifiers to show you ads that are more relevant to your interests
• Collect your IP address and browsing behaviour across sites that show their ads
• Use this information to build interest profiles used for ad targeting

Third party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and other sites on the internet. You can opt out of personalised advertising by visiting Google Ads Settings, or opt out of many third party advertising cookies at aboutads.info.

We have no access to the data advertising partners collect and do not receive personally identifiable information from them. For broader Australian opt-out options, visit YourOnlineChoices.com.au.

Because we serve Google ads, we use Google's certified Consent Management Platform, the Funding Choices tool, to handle advertising consent. If you visit from a region that requires it, such as the European Economic Area or the United Kingdom, a consent message appears before personalised ads or advertising cookies are used, and you can accept, reject, or manage your choices.

Your consent choice is stored on your device (in local storage and a consent cookie) so you are not asked on every visit. You can reopen the consent options and change or withdraw your choice at any time using the privacy or consent link shown in that message.

In Australia, where a consent message is not legally required, ads may be shown without a consent prompt. You can still control ad personalisation using the Google and industry opt-out tools linked throughout this policy.

Bin Night Tonight does not set any first-party tracking cookies. We use localStorage (not cookies) to save your addresses on your device.

Third-party cookies or similar storage may be set by:

• Google Analytics: sets _ga and related cookies to count unique visitors. These persist for up to 2 years.
• Google advertising: Google and its partners may set cookies to personalise and measure ads. Manage these at adssettings.google.com.
• Google consent management: stores your advertising consent choice so the consent message is not shown on every visit.
• Cloudflare Turnstile: may set a short-lived token on the contact page and when you send a bin night report, to tell humans from bots. It is not used to track you across sites.

You can view, manage, and delete cookies through your browser's settings. Blocking Google cookies will not affect your ability to look up bin schedules.

Mapbox

Receives a partial address string while you type (routed through our own server, which holds the access token) to provide autocomplete suggestions, and your coordinates if you use "Use my location". Mapbox's own privacy policy applies to these requests.

OpenStreetMap Nominatim

Used as a fallback for autocomplete suggestions in environments where Mapbox is not configured. Receives a partial address string while you type. OpenStreetMap's own privacy policy applies to these requests.

Your local council's waste system

Receives your full street address to return your bin schedule. No personal data beyond your street address is included. This is the same request anyone can make directly on the council website.

Google Analytics 4

Collects anonymised usage data (pages visited, device type, approximate location) to help us understand how the site is used. Data retained for 14 months.

Google AdSense

The advertising service that serves ads on the site once active. May use cookies and device identifiers for ad personalisation when ads run. We receive no personally identifiable data from this service.

Google Funding Choices

Google's Consent Management Platform. Shows the advertising consent message where required and records your consent choice so ads and ad cookies respect it.

Cloudflare Turnstile

A privacy-focused bot-detection widget that runs on the contact form and on bin night reports to stop spam. It processes limited technical signals from your browser to tell humans from bots and is not used to track you across sites.

Discord

Receives contact form submissions (your message, and your name and email if provided) through a private webhook so the team can read and reply. It also gets a short alert when someone reports a wrong bin night (the council, the suburb and what went wrong, never your address or email), and when a council's system has a technical problem, which includes the address that was being looked up at the time.

Brevo

Sends the email that tells you the outcome of a bin night report, if you left an email address on it, reminder emails if you ask for them, and sign in codes for Plus. It receives your email address, the street and suburb, and the email's content. Brevo is based in France and holds this data in the European Union.

Stripe

Takes Plus payments, runs the Manage Plus page and sends receipts. It receives your email address and card details directly from you. Stripe is based in the United States and Ireland and processes payments under its own privacy policy.

Supabase

Our database. It holds bin day reminders, bin night reports and Plus records, and nothing for anyone who uses none of them.

Web Push (browser push notifications)

If you enable push notifications for reminders, your browser creates a subscription with its own push service (for example Google's for Chrome, or Apple's for Safari) so we can deliver a notification without you having the app open. We never see your device's push token directly, only an opaque subscription endpoint supplied by your browser.

Vercel

Hosts the site in Sydney, Australia, and provides Vercel Speed Insights for aggregated performance metrics. Vercel logs standard request metadata (IP address, timestamp, URL) as part of normal server operation for approximately 30 days.

Sentry

Receives sanitised error reports when something goes wrong. Reports include the URL, error type, and stack trace. When a lookup fails, the report includes the street name without the house number, the suburb and the postcode, so we can find and fix the problem. It never includes your IP address. Reports are kept for 90 days.

Fly.io

Runs our server in Sydney, Australia, which answers address searches and bin lookups. It logs standard request details (IP address, time and address of the request) as part of normal operation. When a lookup fails, the log includes the address searched for. Logs are kept for about 7 days.

Each of these services has its own privacy policy. We do not share anything with them beyond what is strictly required to make the site work.

Bin Night Tonight is covered by the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs). Because we hold very little personal information about you, most of these rights will rarely be relevant in practice, but they apply nonetheless.

Under Australian law, you have the right to:

• Request access to any personal information we hold about you
• Ask us to correct information that is inaccurate or out of date
• Make a complaint if you believe we have mishandled your information

For most people, the information we actually hold is limited to anonymised analytics data (held by Google), any error reports in Sentry, and any messages you have sent us through the contact form. If you have opted in to bin day reminders, we also hold the address for that reminder, which you can request, correct, or delete at any time by turning the reminder off in Settings. A reminder is deleted automatically if you have not opened the app for 12 months. If you have sent a bin night report, we hold that report until it is deleted after 12 months, and you can ask us through the contact page to see it or delete it sooner. An emailed reminder is deleted when you use the stop link in any of its emails. To delete your Plus record, cancel from Manage Plus on the Plus page; we delete it once the subscription has ended. For data held by Google, your options are managed through their own tools linked in the Analytics and Advertising sections above.

To make a complaint about how we have handled your personal information, you can contact us via the contact page. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

You can use Bin Night Tonight without saving any addresses. If you have saved addresses and want them removed, open the Settings screen in the app and delete them individually, or clear your browser's local storage for this site to remove all at once.

If you have turned on bin day reminders for an address, you can turn them off at any time from the Settings screen. This deletes your address from our server immediately, and stops any further notifications to this device for that address.

To opt out of Google Analytics tracking, use the Google Analytics opt-out add-on.

To change or withdraw advertising consent, reopen the consent options from the link in the consent message. To control ad personalisation, visit adssettings.google.com, or visit YourOnlineChoices.com.au for broader Australian opt-out options.

If we make changes to how we handle information, we will update this page and the "last updated" date at the top. Material changes will also be noted on the homepage for at least 30 days. Continued use of the service after changes are posted means you accept the updated policy.

• 26 October 2026: Added Plus, an optional paid subscription, and optional bin night reminders by email, both coming soon. Buying Plus stores your email address and your subscription's status, and Stripe takes the payment. An email reminder stores your email address. Both are used only for those services and are deleted when you stop them.
• 16 October 2026: Added the "Is this right?" question and wrong bin night reports. Reminders now end by themselves after 12 months without opening the app. Saved copies of looked-up schedules are deleted after 60 days and no longer filed under the address. Listed Fly.io, which runs our server, and Brevo, which sends the email telling you the outcome of a report. Corrected what error reports and server logs hold.
• 9 October 2026: Added optional bin day reminders, which store the address you turn them on for.

For privacy questions or to exercise your rights under the Australian Privacy Act, please get in touch via the contact page. We aim to respond within 5 business days.