Privacy policy

If you create an account

We store what you give us: email address, display name, username, chosen language, preferred city and, if you upload one, an avatar. If you sign in with Google, Discord or Reddit, we store the identifiers that provider returns so the account can be linked again. None of it is sold, shared or used for profiling.

When you are signed in

Each active session records its IP address and browser user agent. This standard sign-in security lets a session be attributed and revoked. Sessions expire on their own and are deleted with the account.

When you play

We record your games so scores, history and leaderboards work: game played, city, dataset version, start and end time, outcome and score. Each game also stores an approximate location limited to country and region, derived from your IP address at that moment. The IP itself is not kept alongside it, and this record can be detached from your identity.

Optional product analytics

After consent, we send pseudonymous route, gameplay, conversion, quality and performance events to PostHog Cloud EU. We may also show short event-triggered surveys. We never send email, username, game answers, form content, precise coordinates, raw server errors, network bodies or full URLs. Inputs and private surfaces are masked in replays, and admin, API and authentication callback routes are excluded. You can withdraw consent from Privacy preferences; collection and replay stop, the analytics identity resets and local PostHog storage is removed. Write to the contact address to request erasure.

If you send feedback

A bug report keeps its message and browser user agent. When sent during a game, it also captures the game’s actions, technical versions, and player-visible states so the problem can be reproduced.

Transit data

Lines, stations, connections and maps come from official operator and government publications. They describe public infrastructure, not people. Every source, its licence and its retrieval date are listed on each city page.

Deleting your data

Write to [email protected] to obtain a copy of your data or to have your account and its history deleted.

Who is responsible

Name the Station is the data controller for everything described on this page. For any question or request, write to [email protected].

Why we are allowed to keep it

Account and gameplay data are kept to provide the service you requested under our contract. Session security and approximate first-party geography rely on legitimate interest. Optional product analytics, session replay and micro-surveys are processed only after your explicit consent, which you can withdraw at any time.

Cookies

Essential cookies keep your sign-in session, language, selected city and first-party campaign attribution working. The analytics choice is stored in localStorage as the choice, policy version and decision time; the application creates no extra analytics cookie. PostHog persistence is enabled only after consent and is removed when consent is withdrawn.

How location is determined

Country and region are resolved on our own server against a local MaxMind database file. Your IP address is never sent to a geolocation provider, and it is not stored next to the resulting record. This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.

How long we keep it

PostHog event data is retained for 12 months and masked session replays for 30 days. Sign-in sessions expire and are removed. Account data is kept while the account exists. Audited game facts remain for leaderboard consistency and can be detached from your identity on request.

Who else sees it

We use Cloudflare for traffic delivery, Railway for hosting, database and file storage, Resend for transactional email, and PostHog Cloud EU only after consent for product analytics, masked session replay and micro-surveys. Google, Discord or Reddit handles the sign-in method you choose. We sell nothing and share only what each provider needs to operate.

Where it is processed

Product analytics is sent to PostHog's European Union ingestion and cloud region. The service is delivered through Cloudflare infrastructure in the Netherlands. Email delivery and the sign-in provider you choose may process data outside the European Union under their applicable safeguards.

What you can ask for

You may ask for a copy of your data, correct it, have it deleted, receive it in a portable format, restrict how it is used, or object to processing based on legitimate interest. Write to [email protected] and we will answer within one month.

If you disagree with us

You can lodge a complaint with the data protection authority of the country where you live or work, whatever the outcome of a request made to us.