Legal

Privacy Policy

Last updated 21 October 2026

This policy explains what personal information Nine Tenths Studios Inc (“NineTenths”, “we”, “us”), 221 Main St, Suite N, Nashua, NH 03060, USA, collects when you use our games and websites, including Railway Rumblers (game.railwayrumblers.com, marketplace.railwayrumblers.com, gallery.railwayrumblers.com) and ninetenths.io, and what we do with it.

1. What we collect

Account information

• Your email address and a password. We store the password only as a one-way hash.
• Your username. If you do not choose one, we create it from the part of your email address before the “@”.
• Whether your email address has been verified.
• Optional details if you give them to us, such as your first and last name or a social media handle.
• If you sign in with or link an Ethereum wallet, the wallet address.
• The IP address you signed up from.

Gameplay information

What you do in the game: your station, trains, routes and trips, cards and other items, in-game coin balances and transactions, market trades, Car Swap listings and offers, friends, and game settings you save to your account.

Invitations

If you invite a friend by email, we store their email address and send them an invitation email from you. If they do not join, their email address is not shown to other players. We keep an invited email address until the invitation is used, or for 12 months if it is not.

Usage and security information (metrics)

To run, balance and protect the game, we record:

• Sign-in events: the time, the sign-in method, whether it succeeded, which of our apps it came from, and the IP address of the device. We record failed attempts too. For a failed attempt with an unknown login we do not store what was typed.
• Presence: when your account was first and last seen, and which days it was active.
• Game events: a record of game actions (for example sending a train, collecting a trip, buying a car, trading) with the time and game details. These records use your account number, not your name or email.

Purchases

For card pack purchases we keep an order record: what you bought, the price, the time, the payment status and Stripe’s reference for the payment. See Payments. We also record visits to the store page and checkouts that did not go through.

Messages to us

If you email us, we keep the message and our reply.

Technical logs

Like most websites, our web servers keep standard request logs (such as IP address, time, page requested and browser type) for operating and securing the Services. We keep these logs for 30 days.

2. Cookies and local storage

• rr_session — our only cookie. It keeps you signed in across the Railway Rumblers game, marketplace and gallery. It is essential, is set on .railwayrumblers.com, cannot be read by page scripts, and lasts up to 30 days. Signing out clears it.
• Local storage — the game also saves a few preferences in your browser (for example settings and which messages or trade offers you have already seen). This stays on your device.
• We do not use advertising cookies or third-party analytics trackers.
• When you pay, Stripe’s payment form may set its own cookies for fraud prevention; see Stripe’s cookie policy.
• Our pages load fonts from Google Fonts, which means your browser contacts Google’s servers and Google receives your IP address, under the Google Privacy Policy.

3. Payments and Stripe

Card payments are handled by Stripe. You enter your card details into Stripe’s payment form, and they go straight to Stripe. We never see or store your full card number. Stripe collects payment and device information to process the payment and to prevent fraud, under the Stripe Privacy Policy. Stripe tells us the outcome and gives us a reference for the payment; we pass Stripe our order and account reference numbers with each payment. From Stripe we can see only the card brand and the last four digits of the card. Stripe emails you a receipt for each purchase.

4. How we use information

• To create and run your account and the game, and to keep you signed in.
• To process purchases, assign cards and handle refunds and support.
• To send service emails: email verification, password resets, invitations you ask us to send, and important notices about your account or these policies. We send these from our own mail servers.
• To understand how the game is played, fix bugs and balance it (for example how many players are active and which features they use).
• To protect players and the Services: to detect cheating, abuse, fraud and attacks on accounts, which is the main reason we keep sign-in IP addresses.
• To meet legal, tax and accounting obligations.

We do not sell or share your personal information, and we do not use it for third-party advertising. We send only service emails (the ones listed above), not marketing emails. If we ever send marketing emails, we will only do so if you opt in, and you can opt out at any time.

Legal bases (EU and UK users). We process your information to perform our contract with you (running your account, the game and your purchases); for our legitimate interests (understanding and improving the game, and keeping it secure and free of cheating and fraud); to meet legal obligations (such as tax and accounting records); and with your consent where we ask for it.

5. Public information

Some information is visible to other players, and in some cases to anyone:

• Your username, which is also your station’s public name. Players who are not your friends may see your station only as “Station #” and a number on the map. Your email address is never shown to other players.
• Badges shown beside your name: “Founder” for early players, and “VIP Founder” (a crown) for early players who bought a card pack. So the VIP Founder badge shows others that you made a purchase.
• Your station, its level and its place on the game map; trains you send to other players; cards you list on Car Swap.
• We may add public web pages that show a player’s station and trains by username. If we do, we plan to let you make yours private in your settings.

6. Blockchain data is public and permanent

Railway Rumblers cards are, or will be, recorded as tokens on the Ethereum blockchain. Anything written to a public blockchain, such as which wallet holds a token and the history of transfers, is visible to anyone and cannot be changed or deleted, by us or anyone else. While we hold cards for you, the tokens are, or will be, held in a NineTenths wallet on your behalf, and the blockchain does not show your name, email or account. Which account a card belongs to is recorded in our own database, not on the blockchain. If in future you move cards to your own wallet, your wallet address and those transfers will be public and permanent.

7. Who we share with

We share personal information only with service providers who help us run the Services, and only as needed:

Our email, including verification and password reset emails and mail sent to support@railwayrumblers.com, runs on mail servers we operate ourselves.

We may also disclose information if the law requires it, to protect the rights and safety of players or NineTenths, or as part of a merger, acquisition or sale of assets, in which case this policy would continue to apply to your information.

8. How long we keep it

• Account and gameplay information: for as long as your account exists.
• Sign-in events, including IP addresses: kept for 12 months.
• Game event records: kept while your account exists. They use your account number, not your name or email.
• Daily activity summaries: kept indefinitely; they are keyed by account number.
• Purchase records: kept for 7 years, for tax and accounting reasons.
• Backups: our database backups are kept for 14 days and then deleted.
• Invitation emails for people who have not joined: until the invitation is used, or 12 months.
• Web server logs: 30 days.
• Emails to support: 3 years.

9. Your rights and choices

Wherever you live, you can ask us to:

• access the personal information we hold about you;
• correct information that is wrong;
• delete your account and personal information;
• give you a copy of your information in a portable format.

Depending on where you live (for example California, the EU or the UK), you may also have the right to object to or restrict some uses of your information. We do not sell or share your personal information, so there is nothing to opt out of. We will not treat you differently for using these rights. You can make any of these requests by emailing support@railwayrumblers.com from the email address on your account. We may need to confirm your identity first.

• We answer requests within 30 days.
• Deletion: there is no self-service “delete my account” button yet, so email us. Deletion removes your account and your personal information, including sign-in records and IP addresses. We keep purchase records for tax purposes (see retention), and information already on a public blockchain cannot be erased.
• Some information may be kept after deletion where the law requires it (for example purchase records) and in backups until they expire. Information already on a public blockchain cannot be deleted.
• If you are in California, the EU, the UK or another place with privacy laws, you may also complain to your local data protection authority.

10. Children

Our Services are for adults. You must be 18 or older to create an account. We do not knowingly collect personal information from anyone under 18, and never from children under 13. If we learn that an account belongs to someone under 18, we close it, refund their purchases and delete their personal information except where the law requires us to keep it. If you believe someone under 18 has given us personal information, contact support@railwayrumblers.com.

11. Security

We protect information with measures such as encrypted connections (HTTPS), hashed passwords, a sign-in cookie that page scripts cannot read, and access controls that limit which staff can see account details. No system is perfectly secure, so we cannot guarantee security. Please use a strong password that you do not use elsewhere.

12. Where data is stored

We are based in the United States and our servers are in the United States. If you use the Services from elsewhere, your information is transferred to and processed in the United States.

13. Changes to this policy

We may update this policy. We will change the “last updated” date above and, for material changes, tell you in the game or by email.

14. Contact

Nine Tenths Studios Inc (NineTenths)
221 Main St, Suite N, Nashua, NH 03060, USA
Privacy and account requests: support@railwayrumblers.com
General: hello@ninetenths.io

See also our Terms of Service and Support page.