Crossing Dropping - Privacy Policy

1. Who We Are

Crossing Dropping (“we”, “us”).

App data: The app retrieves public railway schedule and crossing-status information from our servers. No account, sign-in, or personal details are required to use the app.
Location: With your permission, the app accesses your device’s location while the app is in use. This is used to find supported crossings nearby, order them by proximity, and estimate your arrival time in the app and CarPlay. Location is not sent to Crossing Dropping’s servers, retained by us, associated with an account, or used for tracking. Apple Maps services may process location information when calculating travel-time estimates.
Diagnostics and logs (server-side): Our hosting provider (Heroku) automatically processes limited technical request metadata, such as IP address, timestamps, and user agent, on a transient basis for security, reliability, and abuse prevention. This information is not used to identify users, is not associated with an account or persistent identifier, and is not retained long-term by us.
On-device storage: The app stores selected preferences and caches schedule data on your device to improve performance, support widgets, and provide limited offline availability. This information remains on the device and is not shared with Crossing Dropping.
No tracking: The app does not use analytics, advertising identifiers, or any form of cross-app tracking.

Analytics: We use Firebase Analytics to understand aggregated site usage (e.g., page views, referrers, device/browser information). Firebase may process IP addresses and use cookies or similar technologies to measure usage. Learn more:
- Firebase Privacy & Security
- Google Privacy Policy
Server logs: Our web hosting may process standard request metadata (IP address, timestamps, user agent) for security and reliability.

Where applicable (e.g., UK/EU), we rely on:

Legitimate interests: operating and securing the app/website, preventing abuse, and measuring aggregate usage.

App server logs (Heroku): Heroku’s default log stream is ephemeral and not stored long-term by Heroku unless we later configure an external log service.
Website analytics: Retained by Firebase per their default or configured retention settings. See Firebase documentation for details.
We retain only what is necessary for operation and security.

Hosting: Heroku (Salesforce, Inc.) for app/server hosting.
Analytics (Website only): Firebase Analytics (Google LLC).
We may share limited technical data with these providers solely to operate our services.

App: Delete the app to remove cached data from your device.
Website: Manage cookies in your browser; use private browsing modes; adjust ad personalization in your Google account if applicable.
You may contact us to ask questions about your data.

This app and website are not directed to children under 13, and we do not knowingly collect personal information from children.

Data may be processed in countries where our service providers operate. We use reputable providers that implement appropriate safeguards.

We may update this policy from time to time. We will update the “Last updated” date above and publish changes at this URL.