Last updated: September 2026
Train Fares Tracker is a project run by a fellow commuter based in the UK. You can reach us at uktraintracker@gmail.com.
When you sign in with Google, we receive your Google email address, display name, and profile picture. We store these to identify your account. We do not access your Google account beyond these basics.
When you use the app, we store the journey routes, time windows, and travel dates you choose to track. We also store a railcard preference if you set one. This is the information needed to run price checks on your behalf.
We store price data we fetch for your tracked routes and dates. This is what powers the dashboard and your email digests.
If you sign up for email digests, we store your email address and a unique unsubscribe token. We use this only to send you fare change alerts.
If you submit feedback, we store the message, its category, and your email address.
If you subscribe to Pro, payment is handled by Stripe. You enter your card details on a checkout page hosted by Stripe. We never see or store them. We keep a Stripe customer reference and a subscription reference against your account, so we know which plan you’re on and when it renews. Stripe handles your payment data under its own privacy policy.
We do not store card or bank details, and we don’t run advertising. We don’t sell your data or share it with anyone for their own marketing. We do use a small number of processors — Google, Stripe, Microsoft, Supabase and Render — to run sign-in, payments, analytics, hosting and our database; each only processes what it needs for its role.
We use Microsoft Clarity to understand how people use the site. Clarity records session replays and generates heatmaps — this may include mouse movements, clicks, and pages visited. Clarity may set its own cookies. The data is processed by Microsoft and subject to their privacy policy. We use it only to improve the service and do not use it for advertising or profiling.
If you are signed in, or using the tracker as a guest, we also pass Clarity a reference to your account. Without it, coming back a week later or switching from your phone to a laptop counts as a different person each time, which makes the figures useless. The reference is an internal account number. It carries no name, no email address and nothing else about you, and it is hashed in your browser before it is sent. If you are just browsing and have not started setting up a journey, we send no reference at all.
If you opt in, we email you when fares change on your tracked routes. Every email contains an unsubscribe link. Clicking it immediately removes you from the list with no further action required.
We keep your data for as long as your account is active. If you want your account and personal data removed, email us at uktraintracker@gmail.com and we will action it within 30 days. Price data we have fetched is stored at route level, not linked to your account, and may be retained after your account is removed.
Some of the providers we use (including Google, Stripe, and Microsoft) may process data outside the UK. Where that happens, it takes place under standard contractual clauses or another legally recognised safeguard.
Under UK GDPR you have the right to access the data we hold about you, correct inaccurate data, and request removal of your account and associated personal data. You also have the right to complain to the ICO (ico.org.uk) if you’re unhappy with how we’ve handled your data. To exercise any of these rights, email us at uktraintracker@gmail.com and we will respond within 30 days.
We use a session cookie to keep you logged in. If you try the tracker without an account, we also set a cookie that lasts 90 days so the journey you set up is still there when you come back, instead of starting you over. It holds a random reference, nothing about you. Both are functional cookies and do not require consent. Microsoft Clarity, the analytics tool described above, is set up to store nothing on your device, so it sets no cookies of its own. We do not use advertising cookies.
Your data is stored in Supabase, a cloud database provider. If you sign in with Google we hold no password for you at all. If you set a password, we store it only as a one-way hash, never in plain text. We take reasonable steps to secure your data but cannot guarantee absolute security.
If we make material changes to this policy, we will update the date at the top of this page.
Train Fares Tracker