Privacy Notice

1. Data controller

EuroTrainTracker is operated by GiovanniGiacalone, who acts as the data controller for the personal data described in this notice. You can contact us via the feedback page.

2. Data we collect

• Feedback data — the message you send us and, optionally, your email address, language and the page you wrote from.
• Usage and technical data — device and browser type, IP address and basic telemetry needed to deliver and secure the service.
• Preferences — your selected interface language, stored locally in your browser.

Payment data for voluntary donations is collected and processed directly by our payment provider, Stripe; we never see or store your card details.

3. Purposes and legal basis

• Providing and operating the train-tracking service — performance of a contract / legitimate interest.
• Responding to feedback and support requests — legitimate interest / your consent.
• Security, fraud prevention and abuse detection — legitimate interest / legal obligation.
• Product improvement and aggregated statistics — legitimate interest.

4. Who we share data with

• Hosting, database and infrastructure service providers that operate the service on our behalf.
• Stripe (payment provider) for processing voluntary donations and managing monthly contribution plans.
• Professional advisers (legal, accounting) where necessary.
• Authorities where required by law.

5. International transfers

Some providers may process data outside the UK/EEA. Where this happens we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

6. Retention

We keep personal data only as long as needed for the purposes above. Feedback messages are retained while relevant to improving the service, then deleted or anonymised. Technical logs are kept for a limited period for security purposes.

7. Your rights

Under applicable law (including GDPR where it applies) you have the right to access, rectify or erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with your supervisory authority. We respond to requests within one month. To exercise your rights, contact us via the feedback page.

8. Security

We apply appropriate technical and organisational measures, including encryption in transit and access controls, to protect personal data.

9. Cookies

The service uses only essential storage (for example, your language preference saved in your browser). We do not use advertising or marketing cookies. You can clear this data at any time through your browser settings.