Privacy Policy
Last updated: February 2026
1. Introduction
RateMyRailway.com ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
2. Information We Collect
Information you provide:
- Account information: Email address, username, display name, and password when you register
- Profile information: Bio, avatar, and other optional profile details
- Content: Photos, descriptions, ratings, comments, and build log entries you submit
- Communications: Messages you send through our contact form
Information collected automatically:
- Usage data: Pages visited, features used, and interaction patterns
- Device information: Browser type, operating system, and device identifiers
- Cookies: See our Cookie Policy for details
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Create and manage your account
- Display your layouts, ratings, and comments
- Moderate content and enforce our community guidelines
- Communicate with you about your account and the Service
- Improve and personalise your experience
- Analyse usage trends and platform performance
4. Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA) or the United Kingdom, we process your data based on:
- Consent: For cookies and optional marketing communications
- Contract: To provide the Service you have registered for
- Legitimate interests: To improve our platform and ensure security
- Legal obligation: To comply with applicable laws
5. Data Sharing
We do not sell your personal information. We may share data with:
- Service providers: Hosting (Supabase), authentication services, and analytics tools that help us operate the platform
- Public display: Your username, profile, and submitted content are visible to other users
- Legal requirements: When required by law or to protect our rights
6. Data Retention
We retain your data for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us.
7. Your Rights
Under GDPR and UK data protection law, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to processing
- Data portability
- Withdraw consent at any time
8. Data Security
We implement appropriate technical and organisational measures to protect your data, including encryption, secure authentication, and regular security reviews.
9. International Transfers
Your data may be processed in countries outside your own. We ensure appropriate safeguards are in place for any international data transfers.
10. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect information from children under 13.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the platform.
12. Contact Us
For privacy-related enquiries, please use our contact form.