Privacy at viaduct
It's Your Data. And It Should Stay That Way.
Last updated: September 21, 2026
viaduct stands for responsible handling of data privacy. This policy covers the viaduct app and RailGuess, our station-guessing game. We only collect personal data to the extent necessary for functionality. Your trips, games and uploads are stored according to the highest security standards on servers within the European Union.
- Separate Data Storage. Your train journeys recorded with the viaduct app are stored separately from your login data. Data from the viaduct shop is physically decoupled from data of the viaduct app.
- Data-Sensitive Design. viaduct has been developed based on principles of data sensitivity. We only store what is absolutely necessary. Our app runs efficiently without external tracking scripts, and we can avoid cookie banners.
- Transparency. Do you have questions about data privacy or want to inform us of something? Feel free to contact us at any time.
- No Google Analytics. The viaduct app does not use Google Analytics to track your behavior.
- viaduct Shop. The viaduct shop is physically separated from the viaduct app. Direct data exchange does not occur. As a result, when purchasing in the viaduct shop, you may need to enter your email address again. The shop's privacy policy can be found at shop.viaduct.world.
In Detail
Personal Data
We collect only what is necessary: your email address and username when you register. If you add a profile picture or photos, these are stored securely. Social interactions such as follows and followers are recorded to power those features. Server logs (browser type, IP address, timestamps) are retained temporarily for security and operational purposes and are not linked to your profile.
Uploaded Content
Photos and profile pictures you upload are stored on our servers within the European Union. They may be visible to other users according to your privacy settings. You can delete your uploaded content at any time from your account settings. We do not use your photos for advertising or share them with third parties.
Trip Extraction
When you upload a ticket photo, screenshot, or PDF to create a trip, information is transmitted to Mistral AI SAS (Paris, France) acting as a data processor on our behalf. We process your file solely to extract the trip information. Uploaded files are discarded immediately after extraction and are not stored by us or Mistral AI SAS beyond what is required for processing. As an EU-based processor, Mistral AI SAS is bound by a data processing agreement in accordance with GDPR Article 28. For details, see their Data Processing Addendum.
Service Providers
To run viaduct and RailGuess we also rely on service providers. Cloudflare delivers our websites and images and protects sign-up and contact forms against bots. Sign-in is handled by Google Firebase Authentication, which keeps your login details separately from your trips, games and everything else you enter. Sentry, hosted in the European Union, receives error reports from our servers and your browser so we can fix problems. These reports contain technical details and at most your account ID, never your name, email address or password. All three act as data processors on our behalf.
Payments
Patron subscriptions are processed by Stripe. We receive only the minimum information needed to manage your subscription (such as your email address and subscription status). Your full payment details are handled by Stripe and never stored by us. We do not share your trip data or travel records with Stripe. For details, see Stripe's Privacy Policy.
RailGuess
RailGuess (railguess.viaduct.world) is a station-guessing game by viaduct OG. It uses your viaduct account, so everything in this policy applies to it too. When you play signed in, we store your games: the map you played, where you placed each guess, and your scores and times. Your username, profile picture and best score per map appear on that map's leaderboard only while the leaderboard setting in RailGuess is switched on. It is off for new players, and switching it off also hides your past scores. If you play without an account, your game is recorded and gets deleted after seven days unless you create an account and save it. Photo reports you send are kept so we can review them. RailGuess uses cookies to keep you signed in, remember your language and run a guest game. The game map loads tiles from OpenFreeMap and, in satellite view, from Esri.
External Links
viaduct may contain links to other websites. We are not responsible for their content or privacy practices.
Security
We apply technical and organizational measures to protect your data from unauthorized access, loss, or disclosure. Our application servers, database and file storage are hosted within the European Union. We review and update our security practices regularly.
Your Rights
Under GDPR you have the right to access, correct, delete, restrict, or export your data, and to withdraw consent at any time. To exercise your rights, contact us at [email protected]. If you believe your rights have been violated, you may file a complaint with the Austrian Data Protection Authority (DSB), Barichgasse 40–42, 1030 Vienna.
viaduct Social Map
viaduct Social Map (viaduct.live) is a live map of train journeys that viaduct OG runs for events. When you add a journey to an event's wall, we store the name you enter (it is optional), your message, the stations and trains of your journey, when you posted, a random identifier kept in a cookie on your device, and a keyed hash of your IP address that cannot be turned back into the address. No account is needed. Your name, message and journey are shown on the event's wall and to its organizers, who can hide any entry. The organizer of the event decides what the wall asks and how long its entries are kept: for these entries they are the controller, and viaduct processes the data on their behalf. When an event sets a retention period, its entries are deleted automatically that many days after the event, and the page where you add your journey says so. To have your entry removed, contact the organizer or us at [email protected]. To suggest trains, the stations and date you search for are sent from our servers to timetable services, without anything that identifies you. Cloudflare checks the form against bots, and the wall's map loads tiles from OpenFreeMap.