Last updated: 1 September 2026
Robert Jones is the data controller for Railroad Frontier and this website. The project website is railroadfrontier.com; further business information is available at rjonesconsulting.co.uk.
Information collected
Early-access registration
When you join the early-access list, the site collects your name, email address, consent record, the page used to register and the date of registration. A short-lived, non-reversible network identifier may be used to limit automated abuse; it is not used to identify you or included in analytics.
Privacy requests
When you make a privacy request, the site collects your name, email address, request type, the information you choose to provide and timestamps used to manage the request.
Website analytics and security
Google Analytics is loaded only if you accept optional analytics. It measures aggregate use of the site; your early-access name and email are never sent to analytics. Cloudflare may process technical request information to deliver and protect the website. Cloudflare Web Analytics may also provide aggregate, cookie-free traffic measurement.
Why the information is used
| Information | Purpose | Legal basis |
|---|---|---|
| Early-access name, email and consent record | Send Railroad Frontier progress, testing and release news; maintain proof of your choice. | Your consent. |
| Privacy-request details | Locate records, verify a request where needed and respond to your rights request. | Legal obligations and legitimate interests in handling requests securely. |
| Security and delivery data | Prevent abuse, keep the service available and diagnose faults. | Legitimate interests in operating a secure website. |
| Optional analytics data | Understand which pages are useful and improve the website. | Your consent. |
Who processes information
Personal information is not sold. It may be processed by service providers needed to host, secure, back up or measure the site, including the local hosting infrastructure, Cloudflare and—only after analytics consent—Google Analytics. Providers act under their own terms and appropriate data-protection safeguards. Some processing may occur outside the United Kingdom; where it does, recognised transfer safeguards are used by the relevant provider.
How long information is kept
Early-access details are kept while the list remains active and you continue to consent. They are deleted when you withdraw, subject to a minimal suppression record if needed to ensure no further messages are sent. Privacy requests and evidence of their handling are kept only as long as reasonably needed to meet legal and accountability duties. Security records and rate-limit values are short lived. Retention is reviewed when the project or purpose changes.
Cookies and local storage
The public site uses a consent preference only when analytics controls are active. Optional analytics is not loaded before acceptance. WordPress may set essential session or administration cookies for authorised site managers; these are not advertising cookies. No early-access detail is stored in a public-facing cookie.
Your rights
Depending on the circumstances, you may ask to access, correct, erase or restrict personal information, object to processing, receive portable information or withdraw consent. Withdrawing consent does not affect processing that was lawful beforehand.
Use the privacy-request form to exercise a right. You may also complain to the UK Information Commissioner’s Office if you believe a request has not been handled properly.
Children
The early-access form is not intended for children under 13. A parent or guardian should make any request concerning a child’s information.
Changes to this policy
This policy will be updated when the website’s services, providers or data uses change materially. The date at the top identifies the current version.