Skip to content

Privacy Policy

Last updated: 7 June 2026

Overview

Railly is built to show train times, not harvest data. We do not sell your data, use tracking cookies, or show ads. This policy explains what we collect, why, and your rights under UK GDPR.

Data controller

Railly Rail Buddy. Contact our Data Protection Officer at [email protected].

What we collect and why

App preferences (local storage)

Your browser stores preferences such as theme, saved stations, and dismissed banners. For anonymous users this never leaves your device. If you create an account, preferences sync to our servers so they are available across devices.

Train data requests

When you search or view a board, our API queries our database to return live train information. These requests are processed in real time and are not retained.

Feedback

If you submit feedback, we store the message and optional context you provide, plus your IP address and user agent for anti-spam.

Server logs

Our server processes IP addresses and request paths for rate limiting and security. These logs are rotated automatically and are not used for profiling.

Analytics

We use Cloudflare Web Analytics, a cookie-less service that provides aggregate visitor numbers and performance metrics. It does not track you across sites. You can opt out via the cookie banner or block it with an ad blocker.

Legal basis

  • Legitimate interests — Server logs for security and rate limiting; analytics for performance monitoring.
  • Consent — Feedback submissions and account creation.
  • Contract — Account data (email, name) to provide cross-device sync.

How long we keep data

  • Feedback — Up to 12 months
  • Server logs — 30 days
  • Account data — Until you delete your account. Dormant accounts (2 years inactive) may be removed after notice.

Your rights

Under UK GDPR you have the right to access, correct, delete, or restrict processing of your personal data, and to request a portable copy. To exercise these rights, email [email protected]. We will respond within one month. You may also lodge a complaint with the Information Commissioner's Office.

Contact

For privacy questions, email [email protected].