Privacy Policy

Draft · last updated 25 September 2026

Working draft for Early Access, written for a solo/indie seller — not reviewed by a lawyer. Revisit this if EU/UK sales become a meaningful share of revenue (GDPR/UK GDPR add obligations beyond what's covered here).

Who is responsible

Clayton John Anderson, contactable at andersonstudios.dev@gmail.com, is responsible for the data described here.

The website

The site is hosted on Cloudflare. Standard request logs (IP address, user agent, page, timestamp) are processed to serve the site and guard against abuse. There are no advertising or analytics cookies and no third-party trackers.

Buying a license

Checkout is operated by Polar as merchant of record. Polar collects your payment and billing details under its own privacy policy; we do not receive your card number. From a completed order we receive your email address, your license key, and order metadata (product, amount, country, tax), which we use to deliver the key, provide support, and meet tax and accounting obligations.

The app

Transit Architect runs entirely in your browser. Here's how it handles your data:

License key. Your key is sent to our license endpoints to activate and confirm it, and the result (plus an activation id) is cached in that browser's own local storage. Activating a key sends that browser's user-agent string to Polar as a label, so a device can be identified if it ever needs to be freed up — no persistent hardware fingerprint is collected. Each key is active on one browser or device at a time; email support to move it to a new one.
Updates. There is no update mechanism — reloading the page always serves the latest build, so no request is made for this.
Maps. Map tiles are requested from OpenFreeMap as you play; your IP address is visible to that service, under its terms.
Feedback. If you submit feedback from within the app, the message, the app version and basic environment details, and any email address you include are sent to our feedback endpoint and stored as a private issue so we can follow up.
Stays on your device. City search, saved networks, and diagnostic reports are local, stored in that browser's own storage. A diagnostic report is only shared if you choose to export and send it.

There is no analytics or telemetry in the game.

Retention

Server logs are kept for a short period (around 30 days) and then discarded. Order records are kept as long as tax and accounting rules require. Feedback is kept until the issue it concerns is resolved.

Sharing

We do not sell personal data. We share it only with the service providers needed to run the product — payment (Polar), hosting (Cloudflare), and the code-hosting service that stores feedback issues — and where required by law.

Your rights

You can ask us to access, correct, or delete your personal data by emailing the address above. Deleting your order record will revoke your license key.

Children

Transit Architect is not directed to children under 13, and we do not knowingly collect their data.

Changes

Any changes to this policy will be posted on this page with a new date.