Privacy Policy

Last updated: February 20, 2026

Spotatrain.com is owned and operated by Geospotter Studios, based in Canada. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal and non-personal data when you use our website and services.

1. User Accounts and Contributions

When creating an account on Spotatrain.com, we collect your email address and chosen username. As a registered user, you may upload photos, contribute spotting locations, leave ratings, and create favorite lists. These contributions are associated with your account and stored in our database.

Legal basis (GDPR Article 6): Processing is based on your consent (for account creation) and our legitimate interest in operating the platform (for contributions).

2. Website Analytics

We use Google Analytics 4 (GA4) to understand how visitors interact with our website. This service is provided by Google LLC. Data collected includes:

• Pages visited and time spent on each page
• Type of device and browser used
• Approximate location (country, region, city)
• Referring source (e.g., search engine or link)

We have also activated Google Signals, which may associate your visit with your Google account (if signed in) to include aggregated demographic and interest data (such as age and gender).

Legal basis: Your explicit consent via our cookie consent banner. Analytics data is only collected after you grant permission.

3. Advertising (Google AdSense)

We use Google AdSense to display advertisements on our website. Google AdSense may use cookies and web beacons to serve ads based on your prior visits to our website or other websites on the internet.

Google, as a third-party vendor, uses cookies to serve ads on Spotatrain.com. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and/or other sites on the internet.

Types of ads: We may display both personalized and non-personalized advertisements. Personalized ads are only shown if you consent to marketing cookies via our cookie consent banner. Non-personalized ads do not use cookies for ad targeting but may still use cookies for frequency capping, aggregated ad reporting, and to combat fraud and abuse.

You can opt out of personalized advertising by visiting: Google Ad Settings. You can also visit www.aboutads.info to opt out of third-party cookies for personalized advertising.

Legal basis: Your explicit consent via our cookie consent banner.

4. Cookies and Consent Management

On your first visit, we display a cookie consent banner allowing you to accept or reject different categories of cookies. You may choose to:

• Accept All – enables all cookie categories
• Reject All – only essential cookies remain active
• Customize – choose specific categories

Cookie categories:

Your preferences are stored for 12 months and can be updated at any time by clearing your browser cookies and revisiting the site.

5. Google Consent Mode v2

We implement Google Consent Mode v2, which ensures that no personal data is collected by Google Analytics, Google Ads, or Google AdSense until you explicitly grant permission through our cookie consent banner. By default, all consent signals are set to "denied" until you make a choice.

The following consent signals are managed:

• ad_storage – Controls storage (cookies) for advertising
• ad_user_data – Controls sending user data to Google for advertising
• ad_personalization – Controls personalized advertising
• analytics_storage – Controls storage for analytics
• functionality_storage – Controls storage for site functionality
• personalization_storage – Controls storage for personalization
• security_storage – Controls storage for security purposes

6. Data Retention

We retain analytics data for:

• Event-level data: 2 months
• User-level data: 14 months (reset on new activity)

User account data is retained as long as your account is active. You may request deletion of your account and associated data at any time.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States (for Google services) and Canada (where our servers are hosted). These transfers are protected by appropriate safeguards, including the EU-U.S. Data Privacy Framework for transfers to Google LLC.

8. Third-Party Services

We use the following third-party services that may process your data:

• Supabase – Database and authentication (stores account data)
• Google Analytics 4 – Website analytics (with your consent)
• Google AdSense – Display advertising (with your consent)
• Google Tag Manager – Tag management (with your consent)
• Flickr API – Photo integration (publicly available images)
• Vercel – Website hosting and performance analytics

Each service has its own privacy policy governing the use of your data. We encourage you to review their respective privacy policies.

9. Children's Privacy

Spotatrain.com is not directed at children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete such information from our records.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

For EU/EEA residents (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

For California residents (CCPA/CPRA):

• Right to know what personal information we collect
• Right to delete your personal information
• Right to opt out of the sale or sharing of personal information
• Right to non-discrimination for exercising your rights

We do not sell your personal information. To exercise any of these rights, please contact us using the information below.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

Geospotter Studios
Email: contact@spotatrain.com
Website: https://www.spotatrain.com
Contact page: https://www.spotatrain.com/contact/

12. Updates to This Policy

This Privacy Policy may be updated occasionally to reflect new legal requirements or changes in our practices. The latest version will always be available on this page with an updated "Last updated" date.