Privacy Policy

Last updated: 26 August 2026 · Version 1.4

1. Who We Are

My Train Adventure is operated by Goodrich.Digital. We are based in the United Kingdom. You can contact us at hello [at] mytrainadventure [dot] com.

2. Information We Collect

When you use My Train Adventure, we collect only the information we need to make the game work:

Information you give us:

• Email address: used to sign you in safely (via Google Sign-In or magic link email). We do not use your email for marketing.
• Username: chosen by you for display in the game. This is visible to your friends.
• First name (optional): used only to personalise your greeting in the game.

Information collected automatically:

• Game activity: your train collection, station visits, quiz answers, and points. This is needed to make the game work.
• Session information: a secure cookie that keeps you signed in. This is a “strictly necessary” cookie that the game needs to function.
• Terms acceptance record: the date, time, and browser information when you accepted these terms, kept for legal compliance.

Purchase information (if you make a premium purchase):

• Purchase records: we store which train you purchased, the amount paid, any discount or promo code used, and the date. This is linked to your account.
• Promo code usage: if you receive or redeem a promotional code, we record this against your account.

We do not see, store, or process your credit or debit card details. All card information is handled directly by Stripe.

Information we do NOT collect:

• Your real name (unless provided via Google Sign-In).
• Your home address, phone number, or school.
• Your location or GPS data.
• Photos or videos of you.
• Credit or debit card numbers (handled by Stripe, not us).

3. How We Use Your Information

We use your information only to:

• Let you sign in and play the game.
• Save your game progress (cards, stations, points, badges).
• Show your username on leaderboards and to friends (if you choose to make your profile visible).
• Keep the game safe and prevent cheating.

We do not use your information for advertising, marketing, or profiling. We do not sell your information to anyone.

4. Who Can See Your Information?

You control who can see your game profile:

• Private: only you can see your profile.
• Friends only: only your approved friends can see your profile.
• Public: other players can see your username, avatar, and game stats.

Your email address is never shown to other players.

5. Third-Party Services

We use a small number of trusted services to run the game:

• Google Sign-In: if you choose to sign in with Google, Google shares your name and email with us. Google has its own privacy policy.
• Email service: if you sign in with a magic link, we send an email to the address you provide. We do not store email content.
• Google Analytics: on the website only, and only if you accept analytics cookies. It tells us roughly how many people visit and which pages they use. If you decline, it is never loaded. It is never used in the mobile apps.
• Vercel: hosts the website and provides anonymous page-speed measurements. Vercel also stores our data in the United Kingdom and Europe.
• Sentry: on the website only, this tells us when a page hits a technical error so we can fix it. It is never used in the mobile apps.
• Cloudflare: stores and delivers the train and station pictures.
• Stripe: our card payment provider. Card payments are currently switched off, so this is not in use. If we ever turn them on, Stripe would handle card details directly and we would never see or store your card number. Stripe has its own privacy policy.

We never use advertising services, and we never sell or share your information with anyone for marketing.

The mobile apps are different from the website. The Android and iOS apps contain no analytics and no third-party tracking of any kind. They talk only to our own servers, to save your game and show you the pictures. We made that choice deliberately because the apps are made for children.

6. External Links

My Train Adventure may contain links to external websites, such as train activity providers, heritage railways, and ticket booking sites. These links are provided for your convenience and information. We do not control these external sites and are not responsible for their content or privacy practices. We encourage parents and guardians to review the privacy policies of any external sites before sharing personal information.

7. Cookies

We use only one cookie: a session cookiethat keeps you signed in while you play. This is a “strictly necessary” cookie and does not require separate consent. We do not use tracking cookies, advertising cookies, or any third-party cookies. For more details, please see our Cookie Policy.

8. How We Keep Your Data Safe

We take the security of your information seriously:

• Your data is stored securely on our servers in the United Kingdom.
• We use secure, encrypted connections (HTTPS) for all communication.
• We use passwordless sign-in, which means there are no passwords that could be stolen.
• Only game administrators can access user account data.

9. Children's Privacy

My Train Adventure is designed for children. We follow the principles of the UK Age Appropriate Design Code (Children's Code):

• We collect the minimum amount of information needed to run the game.
• We do not use children's data for marketing or profiling.
• Privacy settings default to the highest level of privacy.
• There is no direct messaging between players, only friend requests.
• If you are under 13, we recommend you use this game with a parent or guardian's knowledge.
• Premium purchases require a parent or guardian's permission and presence. Purchase records are stored against the child's account for parental visibility.

10. Your Rights

My Train Adventure is offered in the United Kingdom, Ireland, Australia, New Zealand and Canada. We are based in the UK and follow UK data protection law (UK GDPR) as our baseline. If you are in Ireland the EU GDPR applies to you, and if you are in Australia, New Zealand or Canada your own national privacy law applies. The rights below are given to everyone who plays, wherever you are:

• See your data: ask us what information we hold about you.
• Correct your data: ask us to fix anything that is wrong.
• Delete your data: ask us to delete your account and all your information.
• Export your data: ask for a copy of your data.

To exercise any of these rights, please ask a parent or guardian to email us at hello [at] mytrainadventure [dot] com. We will respond within 30 days.

11. How Long We Keep Your Data

We keep your account and game data for as long as your account is active. You can delete your account yourself at any time from your Profile, or see our account deletion page for the steps. If you ask us to delete your account, we will remove all your personal data within 30 days. Some anonymised game statistics may be retained.

12. Changes to This Policy

If we make important changes to this privacy policy, we will let you know through the game. The date at the top of this page shows when the policy was last updated.

13. Contact Us

If you have any questions about this privacy policy, or if you want to exercise your data rights, please ask a parent or guardian to contact us:

Email: hello [at] mytrainadventure [dot] com

If you are not happy with how we handle your data, please tell us first and we will try to put it right. You also have the right to complain to the data protection regulator where you live:

• United Kingdom: Information Commissioner's Office, ico.org.uk
• Ireland: Data Protection Commission, dataprotection.ie
• Australia: Office of the Australian Information Commissioner, oaic.gov.au
• New Zealand: Office of the Privacy Commissioner, privacy.org.nz
• Canada: Office of the Privacy Commissioner of Canada, priv.gc.ca