Privacy policy
Last updated: 12 November 2026
Short version: you can read RailThrift without giving us any personal data. We don't set cookies, we don't run advertising trackers, and we only hold your email address if you sign up for our newsletter or write to us.
Who we are
RailThrift is published by SNO Media Group. The data controller is [LEGAL NAME — board to fill in, e.g. registered company or sole trader name],[POSTAL ADDRESS — board to fill in], company number [COMPANY NUMBER — board to fill in, or set to an empty string if not a registered company]. For privacy questions, email [PRIVACY CONTACT EMAIL — board to fill in, can be the same as contact email].
What we collect and why
| What | Why | Lawful basis | How long |
|---|---|---|---|
| Anonymous visit statistics (page, referring site, browser, device type, approximate country) via Cloudflare Web Analytics | To see which guides are useful and fix problems | Legitimate interests (running and improving the site) | Kept in aggregate by Cloudflare; no cookies and no profile of you |
| Server and security logs (IP address, request, time) processed by our host, Cloudflare | To deliver pages and protect the site against attacks | Legitimate interests (security) | Short-term, under Cloudflare's retention policy |
| Your email address, if you subscribe to the newsletter | To send you the newsletter | Consent (you can withdraw it any time with the unsubscribe link) | Until you unsubscribe |
| Your name, email address and message, if you email us | To reply and fix any errors you report | Legitimate interests (answering you) | Up to 2 years, then deleted |
We don't sell your data, we don't use it for advertising, and we don't make automated decisions about you.
Affiliate links
When you click an affiliate link, you go through a page on our site starting with /go/, which is counted as an ordinary anonymous page view. You are then sent to the partner's website. The partner, or the affiliate network it uses, may set cookies to record that you came from us so that we can be paid a commission. That data is collected by them, not us, under their own privacy policy. We only receive reports of bookings and commission, not your name or contact details.
Who processes data for us
- Cloudflare, Inc.: website hosting, security and cookie-free analytics.
- Newsletter provider:not yet chosen; this policy will be updated before the newsletter launches.
- Email provider: [EMAIL PROVIDER — board to fill in once a mailbox is set up].
Some of these companies are based in, or may process data in, the United States. Where that happens, transfers are covered by the UK–US data bridge or the EU–US Data Privacy Framework where the provider is certified, or by standard contractual clauses.
Your rights
Under UK GDPR and EU GDPR you can ask us for a copy of your data, ask us to correct or delete it, object to or limit how we use it, and withdraw consent at any time. Email [PRIVACY CONTACT EMAIL — board to fill in, can be the same as contact email] and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or, if you live in the EU, to your local data protection authority. We'd appreciate the chance to put things right first.
Children
RailThrift is written for adults and we don't knowingly collect data from children under 13.
Changes
We will update this page when anything changes and show the date at the top. See also our cookie notice.