Privacy
This page explains how Loco Portal handles information when you use the website.
Visitors
- You do not need an account to browse. The public pages set no cookies and the application includes no analytics, advertising or tracking code.
- Searches are sent as part of the page address (for example
/search?q=3045), so what you search for appears in the address and in hosting logs. - The application stores nothing about visitors in its own database. It only reads locomotive records.
Service providers
- The site is operated using third-party service providers for hosting and data storage. Like most providers they may log technical request details such as IP address, browser type, requested address and time.
- Page data is requested by the application's server, not directly from your browser.
Administrator accounts
- Only invited administrators can sign in. There is no public registration.
- The sign-in service stores each administrator's email address and a hashed password, and may record sign-in events. The application never sees or stores plaintext passwords.
- After sign-in, session cookies (names starting
sb-, ending-auth-token) are set. They are strictly necessary to keep you signed in and are only used on the administration area. - Changes to locomotive records are submitted for review. The application keeps an audit history of each submission and decision, including the administrator's account email and the time.
Access, correction and deletion
Depending on where you live, data-protection law may give you rights over personal data held about you. Administrators can ask for their account to be changed or removed; the project owner can do this directly.
For other requests, contact the project owner. Because no visitor data is stored by the application itself, most requests will concern hosting logs held by the providers above.
Contact
For privacy enquiries, contact us at Chaitume0@gmail.com.
Related: Legal information.