Privacy

The controller, in the GDPR's sense, is the company below. It decides what is collected and why, and it is who you write to about any of it.

The form collects your email address and, if you write one, your answer to "What would you hand the factory first?". We use them to write to you about Rational Trains and your place on the waitlist: no newsletter, no third-party marketing lists, no profiling.

Before the form is accepted, Cloudflare Turnstile checks that a person is sending it, without the tracking a traditional CAPTCHA uses. Then the sign-up is stored as a survey response in PostHog, in the EU, and your email is attached to the record of that visit.

The site measures how it is used with PostHog, hosted in the EU: which pages are reached, where clicks land, how far pages are scrolled, which pages are slow and where something breaks. Visits are also recorded as screen recordings, so that a confusing page can be seen the way a visitor saw it.

• Nothing is stored on your device. No cookie, no browser storage. That is why there is no consent banner here: there is nothing to ask you about. A visit is anonymous, and a new visit is a new visitor.
• What you type is masked in recordings. Recordings are kept for 30 days.
• Page addresses are sent without their query string, so nothing you put in a link reaches the analytics.
• Your IP address is discarded by PostHog when an event arrives.
• If your browser sends Do Not Track, nothing is measured at all.

Nothing collected here is sold, used for advertising or shared with anyone outside the services below.

• Cloudflare serves the site and runs the small function that receives the waitlist form. Like any web host, it sees the usual request data: IP address, browser, the page requested. It also provides Turnstile, the check on the form.
• PostHog stores the waitlist and the analytics, in its EU cloud (Frankfurt). The site talks to it through its own address, depot.rational.delivery.

Both are US companies, so a request may be handled outside the EU. Both operate under the European Commission's standard contractual clauses or an equivalent safeguard.

Your waitlist email is kept until you ask us to drop it. Screen recordings are deleted after 30 days. Analytics events carry no name or email, except the sign-up itself.

Your waitlist email is processed on your consent, which you can withdraw at any time by replying to any message from us or writing to the address below. The analytics and the spam check on the form rest on our legitimate interest in a site that works, is understood and is not flooded by bots.

No decisions are made about you: nothing here scores you, sorts you or decides anything about you. We say so because the GDPR asks.

You have the rights the GDPR gives you: to see the data we hold about you, to correct it, to take it elsewhere and to have it deleted. Email privacy [at] rational.delivery and we will do it.

If you think we have handled your data badly, tell us first, but you do not have to go through us. You can complain directly to the Polish supervisory authority, Urząd Ochrony Danych Osobowych, or to the equivalent authority in the country you live in.

If this page changes, the date at the top moves. Rational Trains is early, so this page is rewritten as what we collect changes, rather than left to drift.