Privacy Policy

Last updated 10 October 2026

Wonder Rails is a toy train set, not a data business. Children can play without an account, and we don’t show ads, use tracking tools or keep a record of what any one person does. This page explains the little we do collect: about parents who choose to sign in or buy on the website, and the anonymous purchase record the iPhone and iPad app uses.

The short version

• Playing needs no account. Nobody is asked for a name, age, email, photo or location to play.
• No ads, no third-party trackers, and no advertising or tracking cookies. The website keeps only anonymous daily totals of visits.
• Only parents sign in, and only to buy the Original Collection or to open it again on another device.
• We never see card details. On the website, payments are handled by Stripe, through Link.
• The iPhone and iPad app has no sign-in. Apple handles the payment, and our purchase processor sees only an anonymous app ID and the App Store purchase record. More below.
• We don’t sell or rent personal information, and we don’t share it for advertising.

What stays on your device

The game remembers a few preferences in your browser’s local storage — things like the scene you last visited, lighting, sound volume, quality and whether Junior Conductor is on. If a parent has signed in or bought the collection, the browser also keeps the sign-in session and a note of what the account owns, so the worlds open even when the internet is slow. This information stays in your browser; you can clear it at any time by clearing this site’s data in your browser settings.

Anonymous visit counts on the website

To learn whether people find the game and how far they get, the website adds to a few daily totals: for example how many visits there were that day, how many stayed for a minute, tried a paid world, opened the grown-ups’ area or tapped Buy, and what kind of site the visit came from (such as YouTube or TikTok). Each count is only a number for the day. We don’t store your IP address, an account, a device ID or anything else that could identify you, and no cookies are used. So that a reload isn’t counted twice, your browser keeps a short note for the open tab (in its session storage, which is cleared when you close the tab). The iPhone and iPad app doesn’t send these counts.

What we collect when a parent signs in or buys on the website

Your account

When a parent signs in (with Google, or with a sign-in link sent by email), our sign-in provider, Firebase Authentication from Google, keeps your email address, an account ID, and basic sign-in details such as when you last signed in. If you use Google, Google may also share the name and profile picture on your Google account; we don’t use them.

Your purchase

For each purchase we keep an order record: your account ID, what was bought, the amount and currency, the order’s status (for example paid or refunded), dates, and the reference numbers Stripe gives us. We use it to open the collection for you, to restore it on your other devices, and to help if something goes wrong.

At checkout, Stripe (through Link) collects your payment details and your name and billing address to take the payment and work out tax. Stripe keeps a customer record with your email, name and billing address, which we can see in our Stripe account. We never receive your full card number.

Messages you send us

If you email support@WonderRails.com, we keep the conversation so we can help you.

Technical logs

Like any website, the servers that deliver Wonder Rails (Google Firebase Hosting and Google Cloud) automatically record basic request information such as IP addresses and times, which is used to keep the service running and secure.

In the iPhone and iPad app

The app needs no account and never asks anyone to sign in. Everything to play is inside the app.

Buying and restoring

The Original Collection is sold through Apple’s App Store. Apple takes the payment under your Apple Account and its own privacy policy; we never receive your name, email address or payment details.

To confirm App Store purchases, the app uses RevenueCat, our purchase processor. The app only talks to RevenueCat once a parent has opened the store in the parent area (behind the grown-ups question), or on a device that has used the store before. It then sends RevenueCat:

• a random app ID created on the device (not linked to your name, email or Apple Account details);
• the App Store purchase record: what was bought, the price and currency, the App Store country, dates and Apple’s transaction numbers;
• basic technical details: device type, system and app version, language and region, and the IP address their servers see.

We use this to open the collection, to restore it on your other devices and to help if something goes wrong, and RevenueCat gives us overall purchase reports (for example, how many purchases and refunds there have been). It isn’t used to track anyone, for advertising, or to build a profile of a child.

What stays on the device

The app keeps your preferences, the random app ID and a note of what the device owns, so the worlds open offline. Deleting the app removes them.

Who helps us

• Google (Firebase) — hosting the website, parent sign-in, storing order records, and running our server code. Data is stored in the United States.
• Stripe and Link — on the website: taking payments as the reseller and merchant of record, tax, receipts, fraud prevention and payment support. Stripe handles your payment information under its own privacy policy.
• Apple — in the app: selling the purchase through the App Store, payment, receipts and refunds, under Apple’s own privacy policy.
• RevenueCat (a US company) — in the app: confirming and restoring App Store purchases and giving us purchase reports.

We share information only with these providers so they can do their jobs, or when the law requires it.

How long we keep it

We keep your account until you ask us to delete it. In the app, RevenueCat keeps the anonymous purchase record so the collection can be restored. We keep purchase records for as long as we need them to provide the collection, handle refunds and disputes, and meet tax and accounting obligations — after an account is deleted, we keep only the minimum purchase record those obligations require.

Children’s privacy

Wonder Rails is made for families, and children can play it without an account. We don’t knowingly collect personal information from children under 13. The game never asks a child for their name, age, email, photo, voice or location.

• Signing in and buying are for parents only, and sit behind a grown-ups question in a separate parent area, on the website and in the app. Junior Conductor mode never shows buying or sign-in at all.
• The only personal information we hold belongs to the parent who signs in or buys on the website. The app sends only the anonymous purchase record described above.
• There are no ads, no chat, no sharing features and no gameplay analytics in the game.

If you believe a child has given us personal information — for example by signing in themselves — please email support@WonderRails.com and we will delete it.

Your choices and rights

You can ask us to see, correct or delete the personal information we hold about you by emailing support@WonderRails.com from the address on your account. Depending on where you live, you may have further rights under local law, and you can raise a concern with your local data protection authority. To delete information Stripe holds about your payment, you can also ask Link support. See Support for how account deletion works. For the app’s purchase record, email us (include the support reference if the parent area shows one, starting WR-) and we’ll delete what we can find; deleting the app removes what’s on the device.

Changes

If this policy changes, we’ll update the date at the top. If a change matters for how your information is used, we’ll give notice on the site before it takes effect.

Contact

Wonder Rails · support@WonderRails.com