Privacy policy

If you create an account

We store what you give us: email address, display name, username, chosen language, preferred city and, if you upload one, an avatar. If you sign in with Google, Discord or Reddit, we store the identifiers that provider returns so the account can be linked again. None of it is sold, shared or used for profiling.

When you are signed in

Each active session records its IP address and browser user agent. This is standard sign-in security — it lets a session be attributed and revoked. Sessions expire on their own and are deleted with the account.

When you play

We record your games so scores, history and leaderboards work: game played, city, dataset version, start and end time, outcome and score. Each game also stores an approximate location — country and region only — derived from your IP address at that moment. The IP itself is not kept alongside it, and this record can be detached from your identity.

If you send feedback

A bug report keeps its message, the page it was sent from and your browser user agent, so the problem can be reproduced.

Transit data

Lines, stations, connections and maps come from official operator and government publications. They describe public infrastructure, not people. Every source, its licence and its retrieval date are listed on each city page.

Deleting your data

Write to [email protected] to obtain a copy of your data or to have your account and its history deleted.

Who is responsible

Name the Station is the data controller for everything described on this page. For any question or request, write to [email protected].

Why we are allowed to keep it

Account and gameplay data are kept to provide the service you asked for — the contract between us. Session IP address and user agent are kept on the ground of legitimate interest: keeping sign-in secure and letting you revoke a session you do not recognise. The approximate country and region attached to a game are kept on the same ground, to compare scores by region and detect abuse.

Cookies

This site sets three cookies and no others: your sign-in session, your chosen language and your selected city. All three are strictly necessary or functional, none tracks you across sites, and none is used for advertising. That is why you are not asked to accept cookies.

How location is determined

Country and region are resolved on our own server against a local MaxMind database file. Your IP address is never sent to a geolocation provider, and it is not stored next to the resulting record.

How long we keep it

Sessions expire on their own and are removed. Account data is kept for as long as the account exists and is deleted with it. Game history is kept so leaderboards stay consistent; on request it can be detached from your identity instead of deleted, so the rankings remain correct.

Who else sees it

We use a small number of providers to run the service: Cloudflare for traffic delivery, Railway for hosting, the database and file storage, and Resend to send transactional email such as sign-in codes. If you sign in with Google, Discord or Reddit, that provider handles the sign-in itself. We sell nothing and share nothing beyond what these providers need to operate.

Where it is processed

The service is delivered through Cloudflare infrastructure in the Netherlands. Email delivery and the sign-in provider you choose may process data outside the European Union.

What you can ask for

You may ask for a copy of your data, correct it, have it deleted, receive it in a portable format, restrict how it is used, or object to processing based on legitimate interest. Write to [email protected] and we will answer within one month.

If you disagree with us

You can lodge a complaint with the data protection authority of the country where you live or work, whatever the outcome of a request made to us.