Cookie Policy

Last updated: 30 August 2026 · Version 1.2

1. What Are Cookies?

Cookies are small text files that websites store on your device (computer, tablet, or phone) when you visit them. They help websites remember things about your visit, like keeping you signed in.

2. Cookies We Use

My Train Adventure uses only strictly necessary cookies. These are essential for the game to work properly. We do not use any tracking, advertising, or analytics cookies.

Session cookie

When you sign in to My Train Adventure, we set a session cookie that keeps you signed in while you play. Without this cookie, you would need to sign in again every time you open a new page.

• Name: next-auth.session-token (or __Secure-next-auth.session-token on HTTPS)
• Purpose: Keeps you signed in
• Type: Strictly necessary
• Duration: Expires when your session ends or after 30 days
• Set by: My Train Adventure (first-party)

CSRF protection cookie

This cookie helps protect your account from cross-site request forgery attacks. It ensures that actions taken on the site are genuinely from you.

• Name: next-auth.csrf-token
• Purpose: Security protection
• Type: Strictly necessary
• Duration: Expires when your session ends
• Set by: My Train Adventure (first-party)

Referral cookie

If you arrive at My Train Adventure through a friend's invite link, we store a small cookie so we can credit your friend when you sign up.

• Name: ref_code
• Purpose: Tracks referral invitations
• Type: Strictly necessary
• Duration: 30 days
• Set by: My Train Adventure (first-party)

Analytics cookies (only if you say yes)

On the website, we can use Google Analytics to count visitors and see which pages people use. It never runs unless you choose “Yes, that's fine” on the cookie banner. If you decline, or if you have not answered yet, it is never loaded and it sets no cookies at all.

• Type: Analytics (optional)
• Set by: Google Analytics (third party)
• Used for: counting visits and popular pages

3. Cookies We Do NOT Use

We want to be clear about what we do not do:

• We do not use advertising or marketing cookies.
• We do not share cookie data with anyone for marketing.
• We do not use cookies to build profiles about you.
• We do not use any cookies or analytics in the Android and iOS apps. The apps talk only to our own servers.

4. Do I Need to Consent?

Under UK privacy law (the Privacy and Electronic Communications Regulations), strictly necessary cookies do not need your consent, but analytics cookies do. That is why the website asks you before loading Google Analytics, and why it stays switched off until you agree.

You can change your mind at any time. This button resets your choice and removes the analytics cookies, and the banner will ask you again:

5. Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to:

• See what cookies are stored on your device.
• Delete individual cookies or all cookies.
• Block cookies from specific websites.
• Block all cookies (though this may stop the game from working).

If you delete or block our session cookie, you will need to sign in again the next time you visit My Train Adventure.

6. Changes to This Policy

If we start using any new cookies, we will update this page and let you know through the game. The date at the top of this page shows when the policy was last updated.

7. Contact Us

If you have questions about how we use cookies, please ask a parent or guardian to contact us:

Email: hello [at] mytrainadventure [dot] com