Privacy Policy

Your settings (theme, sound, language), your run history and your personal bests are written to your browser's localStorage. If you never sign in, they never leave your device. Clearing your browser data, or playing in a private window, removes them.

You can play, keep local results and submit to the leaderboard without an account. You can sign in with Google or with an email address. Signing in with Google shares your name, email address and profile picture with the site; signing up with email stores your email address and a hashed password, and gives you a randomly generated name and picture that you can change. We keep these so your history and personal bests follow you between devices, and we never receive your Google password. Your name and profile picture are shown next to your times on the public leaderboards; turning off "Show my name on the leaderboard" in your account settings hides both. Guests are given an anonymous account identifier so a run can be attributed consistently — it is not linked to any personal detail. When you save a custom route, we store its title, region, start and end stations, route preference, game mode, timestamps and, if sharing is enabled, a random share token. Anyone with that link can view the route title and specification and play it while its owner has Pro; the link does not expose the owner's name or email address. To delete your account and everything attached to it, email the address at the bottom of this page.

Joining battle rooms does not require an account or paid membership. Creating a public room requires a signed-in account with verified Pro access at creation time; guests and free players may join, and the race can finish until the host closes it or its two-hour lifetime ends. For each room we store the creator's account identifier, route and mode setup, a one-way hash of the secret host token, player count, status and timestamps. The public lobby shows the room code, setup and player count, but not the creator's name, email address or host token. Expired rows are removed during subsequent lobby activity, and deleting the creator's account also removes its rooms.

When you submit a run we store the nickname you chose, that run's statistics (time, CPM, WPM, accuracy, per-station splits), the line and mode you played, and the account identifier above. We never ask for your real name, postal address or phone number. To have an entry removed, contact us with enough detail to identify it.

If you choose Rail Typing Pro, Paddle processes the order as our Merchant of Record. Paddle receives the information needed to complete payment, calculate tax, prevent fraud and issue receipts, such as your email address, billing country and payment details. Rail Typing does not receive or store your full card or bank details. We store your Paddle customer, transaction and subscription identifiers, product and price identifiers, purchase or subscription status, and billing-period dates so we can grant access and open Paddle's customer portal. See Paddle's privacy policy.

We process account, game, route and billing-linkage data to provide the service and Pro features, perform our contract, answer support requests and maintain security. We process anti-abuse and essential technical data for our legitimate interests in protecting the service and users. We process optional analytics only with your consent, which you may withdraw at any time. We retain records where necessary to meet legal, tax, accounting and dispute-resolution obligations.

Leaderboard submissions from players without an account are checked with Cloudflare Turnstile, which may process your IP address and other technical signals to confirm you are not a bot. The site runs on Cloudflare Workers, which logs requests for security and performance under Cloudflare's standard practices. We limit access to production data, use encrypted HTTPS connections, signed authentication cookies, verified Paddle webhooks and access controls appropriate to this small service. No system is completely secure. See Cloudflare's privacy policy for more detail.

With your permission, the site loads Google Analytics 4 to understand in aggregate which lines and pages get used. Until you choose Allow analytics, the Analytics script is not loaded. If allowed, Google processes technical information such as your approximate location, device, browser and pages visited; we do not send your account name, email address or game identifier. You can change your choice from Privacy choices in the footer. See how Google uses information from sites that use its services.

The site sets i18n_locale to remember your language and authentication cookies for accounts and guest sessions. Game preferences, local results and your analytics choice are kept in localStorage. If you allow analytics, Google Analytics may set or read its own identifiers. You can block or delete these through your browser settings; core gameplay still works, although language, sign-in and local progress may not persist.

We disclose only the data needed to Cloudflare (hosting, storage, security and bot checks, and sign-in emails), Google (optional sign-in and consented analytics), and Paddle (checkout, tax, receipts, purchase and subscription management, and refunds). We may also disclose data to professional advisers or public authorities when legally required. These recipients may process data outside your country using safeguards provided under applicable law and their privacy terms. We do not sell personal information or use third-party advertising services.

Account, run, saved-route and billing-linkage records are kept while your account exists and as needed for security, accounting, dispute handling and legal obligations. Saved routes remain stored if Pro ends so they are available again after renewal; their public links are unavailable while the owner does not have Pro. Deleting a route removes that saved route, and disabling sharing invalidates its existing token. Webhook event identifiers are retained to prevent the same Paddle event being applied twice. When you ask us to delete your account, we delete or anonymise data we control unless we must keep a limited record by law; Paddle may retain transaction records under its own legal duties.

This site is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

You can clear localStorage and cookies to remove local data, decline or withdraw optional analytics, export Pro run history, disable a route share link, and delete your own saved routes even after Pro ends. You can email us to access, correct, export, restrict or erase data, object to processing, delete an account or leaderboard entry, or ask what we hold. You may complain to your local data-protection authority. We will acknowledge verified requests and respond within one month where GDPR or UK GDPR applies, subject to lawful extensions or exceptions.

We update this policy as the site's features change; the date at the top of this page always reflects the latest revision. Material changes will be noted on the site.

For any privacy question, or to exercise any of the rights above, email support@railtyping.com.