Privacy Policy

Effective [DATE]

Train Watch sends alerts when a freight train is likely blocking Sullivan St, Shelton Rd, or Slaughter Rd in Madison, Alabama. This policy explains what information we collect, why, and the choices you have. Train Watch is operated by [OrbitLink Consulting, LLC] ("we", "us").

What we collect

When you sign up on this website

Your email address (required), and your name and phone number if you choose to give them.
How you'd like alerts (phone notifications and/or email).
Whether you confirmed interest in the $1.99/month price, and whether you saw our free-pilot offer before signing up.

When you use the Train Watch app

Account details: your email address and, if you add it, your name.
Alert preferences: your alert channels, the crossings you follow, whether you want "clear" follow-ups, your quiet hours, and any pause you set.
Sign-in information: one-time sign-in codes (stored only in scrambled, hashed form and valid for 10 minutes), and a sign-in cookie with the browser and device description your browser sends.
Phone notification details: when you turn on notifications, your phone gives us a push address at its maker's notification service (Apple, Google or Mozilla) and the keys used to encrypt notifications to it, plus a device label such as "iPhone".
Alert history and feedback: which alerts were sent to you, by which channel, whether delivery worked, and your answers to "Was this right?".

Automatically, on the website and app

Usage analytics. We use Umami, an analytics tool we host ourselves. It does not use cookies. It records the pages viewed and actions such as clicking Subscribe, confirming the price, or closing the free-pilot offer, along with the referring site, browser and device type, and approximate country. We do not send your email, name or phone number to analytics.
Technical logs. Our servers record IP addresses and request details in their logs, and briefly in memory to limit sign-in attempts and block abuse.

How we use it

To send the train alerts you ask for, and sign-in codes.
To email you about your account and the pilot, such as when accounts open or before any paid plan starts.
To improve train detection, using your feedback on alerts.
To understand interest in the service and its price.
To keep the service secure and prevent abuse.

We do not sell your information, show you ads, or share your information with anyone for their own marketing.

Who we share it with

Only with the services that run Train Watch for us, and only what each one needs:

Hetzner hosts our servers and databases. [Our servers are currently in Finland.]
GitLab hosts this website.
Brevo delivers our emails (sign-in codes, email alerts and service messages), so it receives your email address and the message.
Apple, Google or Mozilla deliver phone notifications to your device. They receive the notification text and your phone's push address, but not your email address or other account details.

We may also disclose information if the law requires it.

Train presence is worked out from public traffic data, railroad radio and City of Madison notices. None of your personal information is sent to those sources.

How long we keep it

Account information is kept while your account exists.
Signup-page information is kept until the pilot ends, or until you ask us to delete it.
Backup copies are deleted on a rolling schedule within 12 months.

Your choices

Change your preferences, quiet hours or pause alerts in the app's Settings.
Stop email alerts using the link at the bottom of any alert email.
Turn off phone notifications in the app, or in your phone's notification settings.
Delete your account in Settings > Delete my account. This removes your account, preferences, devices, alert history and feedback right away; backup copies roll off within 12 months.
To see, correct or delete information you gave on the signup page, email us at [CONTACT EMAIL].

Children

Train Watch is not meant for children under 13, and we don't knowingly collect their information.

Security

We use encrypted connections (HTTPS) everywhere. Sign-in codes and session tokens are stored only in hashed form. Access to our servers is restricted. No system is perfectly secure, but we work to protect your information.

Changes to this policy

If we change this policy in a meaningful way, we'll update the date above and tell account holders by email before the change takes effect.

Contact

Questions or requests: [CONTACT EMAIL]
Train Watch, [OrbitLink Consulting, LLC]
3408 Wall Triana Hwy Unit #21005
Huntsville, AL 35813