Skip to content

Privacy Policy

Last updated: 27 October 2026

Overview

Railly is free to use and funded by advertising and affiliate links. Display ads are served by Google AdSense on selected pages; ad consent is collected by Google's certified consent message. Some links to Railcard are affiliate links — if you buy through them we may earn a commission at no extra cost to you. We do not sell your data.

Data controller

Railly Rail Buddy. Contact our Data Protection Officer at [email protected].

What we collect and why

App preferences (local storage)

Your browser stores preferences such as theme, saved stations, and dismissed banners. For anonymous users this never leaves your device. If you create an account, preferences sync to our servers so they are available across devices.

Train data requests

When you search or view a board, our API queries our database to return live train information. These requests are processed in real time and are not retained.

Feedback

If you submit feedback, we store the message and optional context you provide, plus your IP address and user agent for anti-spam.

Server logs

Our server processes IP addresses and request paths for rate limiting and security. These logs are rotated automatically and are not used for profiling.

Analytics

We use Cloudflare Web Analytics, a cookie-less service that provides aggregate visitor numbers and performance metrics. It does not track you across sites. You can opt out via Cookie settings in the footer or block it with an ad blocker.

Advertising

Display ads on selected pages are served by Google AdSense. Google and its partners may set cookies or read device identifiers to measure and personalise ads. Google's certified consent message appears before personalised ads are served, and you can change your choice at any time.

  • Data used by Google: IP address, user agent, page URL, approximate location, and ad interaction data.
  • Cookies: set by Google and its partners (for example __gads and __gpi) under Google's privacy policy. We do not control these cookies.
  • Opt out: use Google Ad Settings or your browser's ad-blocking controls.

Read Google's privacy policy.

Affiliate links

Some links to Railcard are affiliate links provided by Awin. The banner image is served by Awin; clicking through may set an Awin cookie so the sale can be attributed. We may earn a commission at no extra cost to you. We do not receive your name, payment details, or travel data from Railcard. Read Awin's privacy policy.

Legal basis

  • Legitimate interests — Server logs for security and rate limiting; analytics for performance monitoring; contextual ad delivery and affiliate-link attribution.
  • Consent — Feedback submissions, account creation, and advertising cookies or personalisation (collected by Google's certified consent message).
  • Contract — Account data (email, name) to provide cross-device sync.

How long we keep data

  • Feedback — Up to 12 months
  • Server logs — 30 days
  • Account data — Until you delete your account. Dormant accounts (2 years inactive) may be removed after notice.
  • Advertising cookies — Set and retained by Google and its partners under their policies; typically up to 13 months. See Google's privacy policy.
  • Affiliate cookies — Set by Awin when you click an affiliate link; typically up to 30 days. See Awin's privacy policy.

Your rights

Under UK GDPR you have the right to access, correct, delete, or restrict processing of your personal data, and to request a portable copy. To exercise these rights, email [email protected]. We will respond within one month. You may also lodge a complaint with the Information Commissioner's Office.

Contact

For privacy questions, email [email protected].