Last updated: October 14, 2026
Who is responsible
The controller responsible for processing your personal data is Simon Edge, reachable at info@bahnsteig.net.
What we store
- Username – to identify your account.
- Email address – only to send you password reset links and updates on suggestions you make. We do not send marketing emails or share it with anyone.
- Password – stored only as a one-way salted hash; we cannot read your password.
- Date you accepted this policy – as a record of your agreement.
- Your My Bahnsteig collection – your layouts and stages, the Lokomotiven, Personenwagen and Güterwagen you add, your Wagenzüge and Züge, their details, and any photos you upload. Uploaded photos are stored on the server and can be opened by anyone who has their link.
- Suggestions you send – your corrections and additions to the shared catalogue, linked to your account so the admins know who sent them. Each one is emailed to the site's admins. While a suggestion waits for review, other signed-in users can see what you suggested, your reason and any image you attach, but not your username. After review, only the admins and you can see it.
- Feedback you send – your message and its topic, linked to your account and emailed to the site's admins. Only the admins and you can see it.
We do not use analytics, tracking, or advertising, and we do not sell or share your data.
Why we process it (legal basis)
We process this data to provide your account and the Bahnsteig service you signed up for (Art. 6(1)(b) GDPR, performance of a contract), and to keep the service secure (Art. 6(1)(f) GDPR, legitimate interests).
How long we keep it
We keep your data for as long as your account exists. When you delete your account, your data is removed immediately.
Third parties
Page styling is loaded from the jsDelivr CDN, which receives your IP address when your browser fetches those files. If email delivery is configured, the emails we send (password resets, and updates on suggestions you make) are passed to our email provider for sending. Fonts and icons are served from this site, not from a third party.
Cookies
We only use cookies that are strictly necessary for the site to work, so no consent is required for them:
- session – keeps you signed in and protects forms against cross-site request forgery. Deleted when you close your browser.
- lang – remembers the language you chose with the DE / EN switch. Kept for one year; set only when you choose a language.
Your choice to hide the cookie notice is saved in your browser's local storage, not in a cookie, and never leaves your device.
Your rights
Under the GDPR you have the right to:
- Access and portability – download all data we hold about you from your account page.
- Rectification – change your email address on your account page.
- Erasure – delete your account and all its data from your account page.
- Restriction and objection – contact us using the details above.
- Complaint – lodge a complaint with your local data protection supervisory authority.
Back to sign in About · Contact · Feedback · Impressum · Privacy policy · Buy me a coffee