TrainBrain privacy notice

Updated 26 September 2026. This notice covers the public TrainBrain MCP service, railway Action and maps at rail.mikegtn.net.

Who is responsible?

Michael George Newman (Mike Newman) operates TrainBrain. Contact webmaster@mikegtn.net about privacy, support or a request concerning your information.

Information processed

The public MCP service does not require a TrainBrain account. It receives the tool name and arguments sent by your client, such as stations, travel dates, service identities and requested routes. It does not request your name, email, precise device location, payment details or a full chat transcript. Do not include private information in tool arguments.

Web access logs record request time, the connecting IP address, URL (including any query string), response status, user agent and any supplied referrer. When a platform calls the service, the connecting address may be the platform's rather than yours. Direct map visits expose your browser connection information to the host.

Application diagnostics record operation names, timestamps, random request identifiers, protocol versions, status/error categories and performance information. The protocol tracing does not record credentials, tool arguments or tool results. Unexpected error traces may contain additional diagnostic details. Aggregate usage counters contain totals by endpoint and status, not user profiles.

Maps and images are public

Generated maps, route data and progress images contain the requested railway service or route information and are saved under public, unguessable links. Anyone with a link can view and share it. Links are not access controls. These artifacts do not intentionally include credentials or client identifiers; a route may nevertheless reveal travel interests if you associate it with yourself.

Purposes and legal basis

Information is used to answer railway queries, provide requested maps, operate and secure the service, diagnose failures and respond to support requests. Where this involves personal information, the operator relies on legitimate interests in providing a reliable, secure service and answering correspondence. Data is not used by TrainBrain for advertising profiles or sold.

Other providers

Relevant railway query parameters are sent to Realtime Trains and, where applicable, the TIGER API. Upstream credentials are held on the server and are not returned to clients. The hosting provider processes server traffic and stored files. Email providers process correspondence sent to the support address.

Your chat platform receives tool results and applies its own privacy terms. TrainBrain does not control that platform's chat retention. Interactive maps load Leaflet from unpkg.com and map tiles from OpenStreetMap; those requests reveal browser connection information and the map area requested to those providers. Server-rendered snapshots also request map tiles. Provider infrastructure may process requests in other countries under its own applicable arrangements and policies.

TrainBrain's public pages and maps do not set advertising or analytics cookies. Third-party services linked or loaded by a map have their own privacy practices.

Retention

Web access logs rotate daily, keeping 14 rotated files plus the current log; rotation can be delayed or skipped for empty logs. Application journals rotate according to system storage limits and currently have no fixed time-based expiry. Generated maps and images have no automatic expiry and remain until manually removed. Aggregate counters are retained for ongoing service statistics.

Support correspondence is retained while the issue is active and as needed to document its resolution, handle repeat issues or meet legal obligations. Necessary records may be retained for a dispute or security investigation. Contact the operator to request deletion of an identifiable record or generated artifact; include the relevant link and approximate date. Copies already saved or shared by other people or services are outside the operator's control.

Your choices and rights

You can stop using the service, avoid opening externally hosted maps and request removal of a hosted artifact. Depending on the circumstances, UK data protection law gives rights to access, correction, erasure, restriction, objection and portability of personal information. Contact the address above; the operator may need proportionate information to identify the record and verify the request. There are no automated decisions about eligibility or other similarly significant matters.

If a concern is unresolved, you can complain to the UK Information Commissioner's Office. This service is not directed at children under 13 and does not ask for children's personal information.