Privacy Policy
Last updated: September 26, 2026
This is the privacy notice for Fila de Puentes (filadepuentes.com and its services, including Fili, our AI assistant). It explains, in plain language, what data we collect, why we use it, who we share it with, and how you can ask us to correct or delete it.
The short version
- You can check wait times without giving us your name or email.
- We only ask for your email if you sign up for something (alerts, the waitlist or the news digest) or write to us.
- We use analytics tools (Google Analytics, Mixpanel and Microsoft Clarity) to understand how the site is used.
- Fili's answers are generated by AI and are estimates.
- We do not sell your personal information.
- You can unsubscribe from any email in one click and ask for access or deletion by writing to hola@filadepuentes.com.
1. Who is responsible for your data
The party responsible for your personal data is Fila de Puentes, an independent site with information about border crossings between Mexico and the United States. We are not a government agency. For any privacy matter, email us at hola@filadepuentes.com or use our contact form.
2. What we collect and why
When you just visit the site
Like any website, we receive technical data from your connection: your IP address, your browser and device type, the pages you view and where you came from. Our hosting provider (Cloudflare) derives an approximate location (city and country) from your IP. We use that approximate city to show you the nearest crossing and local sponsorships, and to count views and clicks on those sponsorships by city. We do not store your IP in those counts.
If you arrive from one of our emails or social media posts, the link may include parameters (such as utm_source) that only tell us which channel you came from.
Wait-time alerts
If you sign up for alerts, we store your email, the bridge, the days and the minute threshold you chose, and where on the site you signed up. We use them to send you the confirmation and the alert emails. To manage your alerts we email you a one-time code. The code expires after 10 minutes and the session it opens lasts up to 30 days.
New-crossing waitlist
If you ask us to let you know when we launch in another city, we store your email, the city and your language, and use them only to notify you.
Weekly news digest
If you subscribe to the news digest, we store your email, your language and the area you care about, and use them to send you that email.
Contact form
When you write to us we store your name, email, reason and message, along with your IP address and browser details to prevent spam and abuse. We use this information to reply to you. Your message reaches our team by email and through our internal messaging tool (Slack).
Community reports
If you report a wait time or a gas price, we store what you report (for example, minutes, lane type, price or gas station) and, if you choose to add them, your name and a comment. Your name and comment may be shown publicly next to your report, so do not include anything you do not want to share. To prevent duplicate or abusive reports we store a scrambled fingerprint (hash) of your IP. We do not store your IP as is.
Page reactions
If you rate a page with an emoji, we store only the reaction and the page. We do not link it to your identity.
Your location on bridge pages
If you let us use your location to work out which bridge is closest, the calculation happens in your browser and the location is stored only on your device. We do not send it to our servers.
3. Fili, our AI assistant
Fili's answers are generated by artificial intelligence. They are estimates based on public data, cameras, community reports and our own models, and they can be wrong. Before you travel, confirm with official sources such as CBP.
- Who processes your messages: Fili runs on language models hosted on Cloudflare's infrastructure (Workers AI). We do not send your conversations to OpenAI, Anthropic or any other outside AI provider.
- What we store: the questions you type, a session identifier, a scrambled fingerprint (hash) of your IP, the language, which tools Fili used and how long it took to answer. If you rate the conversation, we also store your rating and comment. We use this to improve answers and catch failures.
- Team notifications: our team receives summaries of some conversations (the first questions, approximate city and country, and device type) in our internal messaging tool.
- Location: Fili may ask for your location to recommend the most convenient bridge. It only gets it if you allow it in your browser, uses it during that conversation, and we do not store it in our database.
- Usage limit: we use your IP to count how many messages you send per day. That counter deletes itself at the end of the day.
- Do not share sensitive data with Fili, such as passport or SENTRI card numbers or health information.
4. Third-party AI assistants and our public API
We offer public access (chat.filadepuentes.com/mcp, together with the openapi.json and llms.txt files) so that AI assistants from other companies, such as ChatGPT, Claude or other apps, can look up wait times and crossing guides. That access only returns public information. It does not return data about our users.
For each request we record the name of the app making it, what information it asked for, the city requested, whether it worked and how long it took. We do not store the text of your conversation with that app. We use the request's IP only for a daily usage counter that deletes itself. What you tell those assistants is governed by each company's own privacy policy, not this one.
5. Analytics and measurement
We use these tools to understand which parts of the site work and which do not:
- Google Analytics 4 (Google): measures visits, page views and where traffic comes from. It uses cookies. You can block it with the Google Analytics opt-out browser add-on.
- Mixpanel: measures page views and key actions, such as opening the alerts form or submitting a report. It keeps an anonymous identifier in your browser's local storage. If you sign up for alerts, the waitlist or the news digest, we link that anonymous activity to your signup and send your email to Mixpanel so we know what led you to sign up. Mixpanel honors your browser's "Do Not Track" setting.
- Microsoft Clarity: we partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps and session replay (clicks, scrolling and movement on the page). Data is collected using first- and third-party cookies and other tracking technologies. For more information, see the Microsoft Privacy Statement.
6. Cookies and local storage
We do not set our own cookies on the public site. Language is chosen by the address (for example, /en for English). The cookies you may see come from the third-party services described in this policy:
- Google Analytics (cookies such as _ga).
- Microsoft Clarity (cookies such as _clck and _clsk).
- Cloudflare, for security and Turnstile verification.
- YouTube, when you watch an embedded live camera.
We also keep a few preferences only in your browser (local storage), which never leave your device on their own:
- Your color theme (light or dark).
- Whether you have already seen Fili's welcome.
- Site notices you dismissed and whether you dismissed the install-the-app card.
- Your approximate location, if you shared it to find the nearest bridge.
- A count of signup attempts, to prevent repeated submissions.
- Temporary access to the manage-alerts page (cleared when you close the tab).
- Mixpanel's anonymous identifier.
You can clear cookies and local storage in your browser settings. The site will keep working, but you will lose those preferences.
7. Security verification
To protect our forms (alerts, contact, reports, waitlist and news) from spam and automated abuse, we use Cloudflare Turnstile. It runs invisibly and may collect information about your device and browser to confirm you are a real person. We do not use this information for advertising or to track you across sites. See the Cloudflare Turnstile Privacy Addendum for details.
8. Third-party content on the site
Some pages load content directly from other sites. When that happens, your browser connects to them and they receive your IP and browser details:
- YouTube live cameras. Some use YouTube's privacy-enhanced mode (youtube-nocookie.com) and some do not. YouTube may use cookies under the Google Privacy Policy.
- Other public cameras, such as the El Paso Zoo cameras and those of transportation agencies (for example, TxDOT and Caltrans).
- Currency exchange house icons, loaded from a Google service.
- Share links for WhatsApp, Facebook, X, Instagram or TikTok. They only connect you to those networks if you click them.
We also store images from public bridge cameras to improve our line estimates. They show traffic from a distance and we do not use them to identify people or vehicles.
9. Sponsorships and advertisers
Some pages may show sponsorships from local businesses. We serve them ourselves, without third-party ad networks. We count how many times each sponsorship is seen and clicked, by approximate city, and advertisers only receive those aggregate numbers. We do not share data that identifies you with them.
If you are an advertiser and use our portal (portal.filadepuentes.com), we store your business contact details and campaign information, and email you sign-in codes. If you pay online, the payment is processed by Stripe. We do not store card numbers.
10. Who we share your data with
We do not sell your personal information or share it with ad networks. We only share it with providers that help us run the service and process it on our behalf:
- Cloudflare: hosting, security, Turnstile verification, image storage and the AI models behind Fili.
- Neon: our database.
- Resend: email delivery (confirmations, alerts, codes and news).
- Google: Google Analytics and YouTube cameras.
- Microsoft: Microsoft Clarity.
- Mixpanel: product analytics.
- Slack: internal notifications to our team (contact messages, new signups and Fili summaries).
- Stripe: advertiser payments, when applicable.
We may also disclose information if the law requires it or if it is necessary to protect the security of the service or other people. These providers may process data in the United States and other countries. Under Mexican law, transfers to providers acting on our behalf do not require your consent.
11. Why we process your data
Primary purposes (needed to provide the service you ask for): sending you alerts, waitlist notices and the news digest; replying to your messages; publishing your reports; running Fili; and protecting the site from spam and abuse.
Secondary purposes (not needed for the service): analytics and measurement, understanding what led you to sign up, and improving the site and Fili. If you do not want us to use your data for these purposes, email us at hola@filadepuentes.com, and you can also block analytics in your browser. Saying no does not affect the service.
When you give us your email for a subscription, we rely on your consent, which you can withdraw at any time by unsubscribing.
12. How long we keep your data
- Codes for managing alerts expire after 10 minutes, and the sessions they open after 30 days.
- The usage counters for Fili and our public API delete themselves every day.
- If you unsubscribe from an email, we stop sending it and keep a record of the unsubscribe so we can honor it. If you want us to delete your email entirely, just ask.
- Everything else we keep for as long as needed for the purpose we collected it for, or as long as the law requires. You can ask us to delete it sooner.
13. Your rights and how to use them
- Unsubscribe: every email we send includes an unsubscribe link.
- Manage or delete alerts: you can change or remove your subscriptions from the alerts page.
- Access, correction and deletion: email us at hola@filadepuentes.com or use the contact form.
To handle your request we need to know what you are asking for and the email you signed up with. We may ask you to confirm that the email is yours.
If you live in Mexico: ARCO rights
Under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), you have the right to Access your data, Rectify it, Cancel it and Object to its use (ARCO rights), and to revoke your consent. Send your request to hola@filadepuentes.com with your name, the email you used with us, the right you want to exercise and a clear description of your request. We will respond within the time limits set by law. If you believe we did not handle your request properly, you can contact the Mexican data protection authority.
If you live in the United States (including California)
Depending on your state, you may have the right to know what personal data we hold about you, to ask us to correct or delete it, and not to be discriminated against for exercising those rights. The categories of data we collect are those described in this policy: identifiers (email, name if you give it, IP and an anonymous identifier), activity on the site, approximate location and, only if you share it, precise location for Fili or to find the nearest bridge. We do not sell your personal information or share it for advertising based on your activity on other sites. To exercise your rights, email us at hola@filadepuentes.com.
14. Children
Fila de Puentes is not directed at children under 13, and we do not knowingly collect their data. If you are a minor, ask a parent or guardian to help you before giving us your email. If you believe a child has given us their data, contact us and we will delete it.
15. Security
We use encrypted connections (HTTPS), bot verification, usage limits and scrambled IP fingerprints instead of the original IP where possible. No system is 100% secure, but we work to protect your information.
16. Changes to this policy
If we change this policy, we will post the new version on this page and update the date at the top. If the change is significant and we have your email, we will also let you know that way.
17. Contact
Questions about your privacy? Email us at hola@filadepuentes.com or use the contact form.