Privacy Policy

This privacy policy explains how personal data is processed by TransferGuessr.

1. Data controller

2. Hosting and server logs

The website, API and database are operated through Railway Corporation as a processor. Railway processes technically necessary log data such as IP address, access time, requested address, transferred data volume, referrer and browser information, as well as the data stored to provide the service.

More information about Railway privacy

3. User accounts and gameplay

For registration, login, guest access, game progress and leaderboards, TransferGuessr processes account and gameplay data entered or generated while using the service. Registered users can download their stored account and gameplay data from the account menu and permanently delete their account there.

4. Local storage

The application stores technically necessary authentication information or session tokens locally in the browser or on the device. They are used for sign-in and removed on logout unless a further legal retention obligation applies.

5. Google AdSense

If Google AdSense is enabled, Google may serve advertisements and process cookies, IP addresses, device identifiers, web beacons and similar technologies for ad delivery, measurement, fraud prevention and, where consent has been given, personalisation.

How Google uses information from sites and apps .

6. Consent management

Before personalised advertising is served in the EEA, the United Kingdom or Switzerland, a Google-certified consent management platform is used. Visitors can consent, refuse or manage their choices and change them later.

7. Recipients and international data transfers

Recipients are Railway Corporation for hosting, database operations, logs and backups and, only when advertising is enabled, Google. Railway states that its primary processing operations may take place in the United States. For transfers outside the EEA, appropriate safeguards such as the EU-US Data Privacy Framework where applicable or the EU Standard Contractual Clauses are used.

8. Retention periods

Account and gameplay data are stored while the account exists and removed after permanent account deletion unless statutory retention obligations apply. Guest progress, verification tokens and password-reset tokens are deleted after their respective retention periods. Server-log and backup retention follow the configured Railway environment.

9. Your data protection rights

Subject to applicable legal requirements, you may request access, rectification, erasure, restriction of processing, data portability or object to processing. You may withdraw consent at any time with effect for the future. You also have the right to lodge a complaint with a competent data protection supervisory authority.

10. Privacy contact

Privacy requests can be sent to [email protected] .