Privacy policy
Last updated: 4 October 2026
Train Punctuality shows how late trains in France and Switzerland are and lets passengers share what is happening on board. This page explains what personal data the site handles, why, and what your rights are under the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).
Who is responsible
The site is run by the operator of Train Punctuality, who is the data controller. You can reach the operator at kokezazeljko@gmail.com for any question about your data.
What we collect
- Your email address, only if you sign in. It is used to send you a sign-in link and to keep you signed in. It is never shown to other visitors.
- The display name you choose. It is shown next to your comments unless you post anonymously.
- Your comments: the text, the reason or rating you pick, whether you marked yourself as on board, the train and the time of posting.
- Technical data needed to run the site, such as your IP address and browser type, which our hosting providers keep in their server logs for a short time.
- Your language and country choice and, if you sign in, your session. These are stored in your own browser.
You can read train delays without signing in. In that case we do not collect any personal data beyond the technical server logs.
What we do not do
- We do not sell or rent your data.
- We do not show ads.
- We do not use tracking or advertising cookies, and we do not use analytics tools that follow you across sites.
Why we use your data (legal basis)
- To give you an account and publish your comments: this is necessary to provide the service you asked for (GDPR article 6(1)(b)).
- To keep the site secure and prevent spam and abuse, using server logs and posting limits: our legitimate interest (article 6(1)(f)).
Who processes the data for us
We use trusted providers that process data on our behalf:
- Supabase: database and sign-in. Data is stored in the European Union (Frankfurt, Germany).
- Vercel: hosting of the website. Vercel may process technical data, such as IP addresses, outside the EU under the European Commission's standard contractual clauses.
- GitHub: runs the scripts that fetch train data from SNCF and opentransportdata.swiss. These scripts do not handle any visitor data.
Train data
Timetables and real-time delays come from SNCF open data (transport.data.gouv.fr) and, for Switzerland, from opentransportdata.swiss. They contain no personal data.
How long we keep data
- Your account and display name: until you ask us to delete them.
- Your comments: until you delete them yourself (use “Delete” next to your comment) or delete your account.
- Server logs: kept by our hosting providers for a limited time, usually a few days to a few weeks.
Your rights
Under the GDPR you can ask to access your data, correct it, delete it, receive a copy of it, or object to how we use it. Write to kokezazeljko@gmail.com and we will answer within one month. You can also delete any of your comments yourself at any time.
If you are not satisfied
You can file a complaint with a data protection authority, for example the Federal Data Protection and Information Commissioner in Switzerland (www.edoeb.admin.ch), the CNIL in France (www.cnil.fr) or the authority in your own country.
Children
The site is not intended for children under 15. Do not create an account if you are under 15.
Changes to this policy
If we change how we handle data, we will update this page and the date at the top.