Privacy

railnest works without cookies, without tracking across sites and without advertising networks. This page says exactly what happens when you visit.

The short version

We do not set cookies. We do not use Google Analytics, no advertising pixels, no social media buttons. Fonts are served from our own server, so no request goes to a third party while you read.

We count visits with our own installation of Matomo, configured without cookies and without storing full IP addresses. Nothing in that data identifies you, and none of it leaves our server.

If you click through to a booking site, you leave railnest and that site's own rules apply.

Who is responsible

Railworld AB, Wallingatan 12, 343 34 Älmhult, Sweden, company registration number 559563-8254, is the controller for the processing described here.

Questions about data protection: [email protected]

Server logs

Like every web server, ours records each request: the page requested, the date and time, the amount of data sent, the browser and operating system reported by your device, and the IP address you connected from.

This is needed to deliver pages and to recognise attacks and faults. The legal basis is our legitimate interest in operating the site securely, Article 6(1)(f) GDPR. Logs are deleted after seven days unless a specific incident requires us to keep a particular entry longer.

The servers are operated by Hetzner Online GmbH in Falkenstein, Germany, under a data processing agreement. Traffic reaches them through Cloudflare, which filters attacks and delivers the site; Cloudflare processes connection data as our processor.

Visit statistics

We use Matomo, installed on our own infrastructure. No visit data is sent to any analytics company.

Matomo runs here in its cookie-free configuration. It does not store a cookie on your device and does not create a permanent identifier. IP addresses are shortened before storage so that they cannot be traced back to a person or a household.

What we can see from it: which pages are read, roughly which country a visit came from, which language a browser asked for, and whether a link worked. What we cannot see: who you are, what you did before or afterwards, or what you do on other sites.

The legal basis is our legitimate interest in knowing which stations people actually look for, Article 6(1)(f) GDPR. Because no information is stored on your device, this does not require consent.

Links to booking sites

Some entries link to Booking.com. Those links carry an identifier that tells Booking.com the visit came from railnest, so that a commission can be attributed. The link is marked as advertising.

Nothing is sent to Booking.com until you click. There is no script from them on our pages and no data flows to them while you are reading.

Once you click, you are on their site and their privacy policy applies. They will set their own cookies, as they would from anywhere.

Maps

The map on a station page loads its tiles from tiles.rail.world, a server run by the same company. Your browser fetches them directly, so that server sees your IP address — as every server does when it sends you something. It sets no cookies, and it passes nothing on to anyone else.

The map itself is built from OpenStreetMap data, prepared with OpenMapTiles. If the tile server does not answer, the page falls back to a plain diagram drawn by our own server: the station, the five-minute area, the pins, and nothing more.

Contacting us

If you write to us, we process your message and your address in order to answer. The legal basis is Article 6(1)(b) or (f) GDPR, depending on the reason for your message.

We keep correspondence as long as the matter is open, and afterwards only where a retention period requires it.

Your rights

You have the right to know what data we hold about you, to have it corrected or deleted, to have its processing restricted, to receive it in a portable form, and to object to processing based on legitimate interest.

Write to [email protected]. You do not need to give a reason and you do not need to use any particular form.

You also have the right to complain to a supervisory authority. In Sweden this is the Integritetsskyddsmyndigheten (IMY), Stockholm — imy.se. You may also complain to the authority where you live.

Changes

When we change how the site handles data, we change this page with it. The date of the current version is shown below.

Version of August 12, 2026