Privacy Policy

1. Introduction

Welcome to Rail Radar ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect your information when you use our website at railradar24.com (the "Service").

2. Information We Collect

2.1 Information Collected Automatically

When you visit our Service, we automatically collect certain information, including:

• A hashed representation of your IP address for station-visit analytics and abuse prevention (we do not store your raw IP address in our own analytics dataset)
• Browser type and version
• Pages visited and time spent on pages
• Referring website
• Device type and operating system
• Approximate country, network speed, and Web Vitals performance measurements
• Stations viewed, including the type of data requested (arrivals or departures)

2.2 Local Storage

We use your browser's local storage to save preferences on your device. This data is not transmitted to our servers and includes:

• Recently viewed stations (up to 3 station IDs)
• Saved/bookmarked stations (up to 7 station IDs)
• Map layer preferences (station types and layer visibility settings)

2.3 Geolocation

The Service may request access to your device's location to center the map on your position. This is entirely optional and only activated when you use the "locate me" feature. Your location data is used locally in the browser and is not sent to our servers.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Analyze usage patterns to improve the Service (e.g., trending stations)
• Monitor and prevent technical issues
• Enforce rate limits to protect the Service from abuse

4. Third-Party Services

We use the following third-party services:

• PostHog (EU) — for website analytics and Web Vitals performance monitoring using anonymized, cookieless data points that are not tied to individual visitors. Data is processed and stored on PostHog's EU infrastructure and is routed through our own domain (t.railradar24.com)
• Mapbox — for interactive map rendering and static map images (may collect IP addresses, coordinates, and map interaction data)
• Cloudflare — for API hosting, security, rate limiting, and analytics data storage
• Fontsource — font files are bundled and self-hosted with the app; browsers do not request fonts from a third-party font service when loading the Service

These services may collect information as described in their respective privacy policies.

5. Cookies

We do not use our own cookies for tracking purposes. PostHog is configured in a cookieless, anonymous mode (in-memory session storage, with no visitor identification). Some third-party services integrated into our Service, particularly infrastructure or map providers, may use cookies or similar technologies as described in their own privacy policies.

6. Data Retention

Station visit analytics (containing hashed IP addresses and station metadata) are stored in Cloudflare Analytics Engine in accordance with Cloudflare's retention policies. We do not maintain a separate database of personal user information. Local storage data remains on your device until you clear your browser data.

7. Your Rights

Under applicable data protection laws (including GDPR), you have the right to:

• Access the personal data we hold about you
• Request correction or deletion of your personal data
• Object to or restrict processing of your personal data
• Data portability

Since we hash IP addresses before storage, we may not be able to identify your specific data. To exercise any of these rights, please contact us using the information below.

8. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us at contact@railradar24.com.