Privacy Policy
Effective date: April 16, 2026
1. Introduction
Railroad Ops (“the Service”), operated by Jeremiah Price (“we”, “us”, “our”), respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
2. Information We Collect
Account information
Email address and password (hashed, never stored in plain text). Name if optionally provided.
Railroad data
All content you create within the Service — layouts, locations, rolling stock, trains, waybills, operating sessions, and related data.
Payment information
If you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number. Stripe may collect billing information per their own privacy policy.
Automatically collected
IP address and basic request logs for security and abuse prevention. No analytics, tracking pixels, or marketing cookies.
3. How We Use Your Information
- To provide and operate the Service.
- To send transactional emails (account verification, password reset, crew invitations).
- To process payments through Stripe.
- To protect against abuse and unauthorized access.
We do not sell, rent, or share your personal information with third parties for marketing purposes.
4. Third-Party Services
We use the following third-party services to operate Railroad Ops:
| Service | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Email, billing info (paid users only) |
| SMTP2GO | Transactional email delivery | Email address, email content |
| Neon | Database hosting | All account and railroad data (encrypted in transit) |
| Vercel | Application hosting | IP address, request logs |
Each provider has their own privacy policy governing their handling of your data.
5. Cookies
We use session cookies only — required for authentication and maintaining your logged-in state. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.
6. Data Retention
- Your data is retained as long as your account is active.
- If you delete your account, all associated data is permanently deleted.
- Backups may retain data for up to 30 days after deletion.
7. Your Rights
- Access: You can view all your data within the Service.
- Export: You can export your data at any time using the CSV export feature.
- Deletion: You can delete your account and all associated data at any time.
- Correction: You can update your account information at any time.
8. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete it.
9. Security
We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords (bcrypt), and encrypted sensitive settings (AES-256-GCM). However, no method of transmission or storage is 100% secure.
10. Changes to This Policy
We may update this Privacy Policy at any time. We will notify you of material changes by email. The effective date at the top of this page indicates when it was last updated.
11. Contact
For questions about this Privacy Policy, contact us at support@railroadops.com.