Privacy
Privacy policy
Last updated: 6 November 2026 · applies to SelectOR 1.2.90 and later and to this website.
In short
- SelectOR has no adverts and no telemetry, and your data is never sold or given to anyone.
- Without an account, the program only goes online to look for updates, count how many copies of SelectOR are open (with no personal data) and download the files it needs (the platform people, weather images and the public server list).
- An account is optional and only needed for Companies and the Board, the live map, chat and multiplayer (the shared room, its radio and the public servers).
- The room radio only uses the microphone while you hold to talk and records nothing.
- You can delete your account and its data at any time from the program itself.
Who is responsible
SelectOR is a personal, open-source project by David MZP, who decides how this data is handled. For any privacy question, write through the contact form or on the project's Discord.
The SelectOR program
Without an account
- Updates (at start-up and every 3 hours): a public request to the SelectOR server that sends no personal data. As with any connection, the server sees your IP address. On start-up a new version installs itself if it carries the author's digital signature; with SelectOR open, it is offered and you install it.
- Users online: every minute SelectOR reports that it is open, with a random ID stored on your PC, its version and an encrypted digest of your IP (never the IP itself). It is only used to count how many copies of SelectOR are open and is deleted after 2 days.
- Downloads: the platform people and weather images come from SelectOR's servers; the public Multiplayer server list comes from tsimserver.com, an external service.
- Preferences and caches (favourite routes, settings, thumbnails, consists…): stored only on your PC.
- SelectOR reads your Open Rails content (routes, trains, activities) to show it to you, but never sends it anywhere.
With an account (optional)
If you create an account and sign in, the following data is stored on the SelectOR server:
| Data | What for | Who sees it |
|---|---|---|
| Account | Username and language (SelectOR no longer asks for an e-mail address: older accounts created with one keep it only to sign in); the password is stored encrypted, never in plain text. Used to sign in. | You. Other users only see your username. |
| IP fingerprint | A fingerprint (encrypted digest) of your IP address, never the IP itself. It allows up to 3 new accounts per connection every 30 days and 3 open sessions at once per connection, to stop fake league accounts, and to count open copies of SelectOR without anyone inflating the figure. | Nobody: only the server compares it. |
| Companies | The companies you create or join, your role, the services you run (route, train, times, kilometres, passengers, stops and income), the fleet, bank transactions, the league and notifications. | Your company's members. All users with an account see the rankings, the trains your company sells or rents out on the market and, in Board → Transparency, its monthly figures (members, trains, services, km, hours, passengers, income, costs, profit and offences), never its drivers' names. |
| Board | The showcase card, ads (with their image) and job offers your company publishes, and the join requests you send from it, with your message. While one of your join requests is pending, that company's manager and staff can see your profile: licence, services, km and hours, your most used routes and trains, your companies and your certificates. | All users with an account see the showcase, ads and offers; your request, only the company you send it to. While it is pending, its manager and supervisors can see your driver profile: your username and licence photo, since when you have been on SelectOR, how much you have driven (km, trips, hours, passengers), the trains and routes you use most, your licence points, how many infractions and sanctions you have from the last 90 days, your services in the shared room, your titles and the companies you are already in. |
| Points licence | Offences detected while driving and penalties from the administrator (type, points, reason, fine, route and date), and your points balance. | You, your company and the administrator, who reviews them. A fine shows in the company bank and, in Transparency, only each company's number of offences, without names. |
| Licence photo | Optional. Shown on your licence and on your colleagues' licence cards. | Members of your companies and, if you turn on «Show my photo on the maps», every user on the maps. |
| Company chat | The messages you write. | Members of that company. |
| Announcements | Audio clips uploaded by the company management for its lines. | Members of that company. |
| Live map | While you drive signed in: train position, route, train and username, every 5 seconds. It is deleted when you stop driving (if Open Rails closes unexpectedly, after an hour at most) and can be turned off in My profile → Share my position on the map. | Other SelectOR users. |
| Multiplayer | The server (address and port) you join, the route and the numeric password if you set one. Used so others can see the server is busy and to protect it. The game itself is handled by Open Rails directly with that server. | Other users see the route and whether the server is free; the password, only those who know it. |
| Shared room | When you drive in the CGL room or open its control centre you connect to SelectOR's room server, which receives what your Open Rails sends in multiplayer (your player name, train, position and messages) and relays it to the room. The room chat keeps only its last 40 lines and forgets them when the room empties. The server records the IP and name of each connection in its technical logs, for security and to fix faults. Dispatchers are stored by their user ID. For the room bonus, the room server tells SelectOR every 30 seconds who is connected and who is in charge as dispatcher; only since when you have been in the room without a break and the last time you were seen are kept, and, for each bonus service, the bonus and the dispatchers who directed it. If a dispatcher disconnects you from the room or removes your loose wagons, who, whom, when and the reason are kept for the administrator to see. | The other players in the room and anyone watching the control centre see your name, train and messages; anyone can see who the dispatcher is on the room card. |
| Certificates | Your exams (when, which one and the correct answers), your certificates and their level, your hours in command as a dispatcher in the room, and suspensions or certificates granted by the administrator. Others see your badge in the room, the chat and the radio, and so do the companies you ask to join. | |
| Room radio | Your voice, only while you hold the push-to-talk key or button (1 minute at a time at most). It is sent through the room server, live, to those in the room; it is never recorded or stored anywhere. Who you mute and the volume are saved only on your PC; if the administrator mutes someone for everyone, the server remembers it while the room is open. | Those in the room (driving or in the control centre) while you talk. |
In addition, like any server, the sign-in service records the IP address and time of each sign-in in its technical logs, for account security.
This website
- Hosting: the website's provider keeps technical logs of visits (IP address, browser and requested page) to serve and protect it.
- Visit statistics: Vercel's analytics are used, which count visits in an aggregated, anonymous way, without cookies.
- Contact form: the name, e-mail address, version and message you write are sent by e-mail to the person responsible, only so they can reply.
- My Company: uses the same account as the program. The session is kept in your browser and erased when you close it; the password is never stored.
- The website uses no cookies. It only remembers your chosen language in your browser.
Where the data is kept and who processes it
Data is processed only to make SelectOR work, using these providers on behalf of the person responsible:
- Supabase: database, sign-in and files (photos, audio clips and updates).
- Vercel: hosting and statistics for this website.
- Resend: delivery of contact-form messages.
- Fly.io: the shared-room server (in Paris).
Some of these providers may process data outside the European Economic Area, under the safeguards set out in their own terms. The project's Discord is an external service with its own privacy policy.
How long it is kept
- Account data is kept for as long as the account exists.
- Live-map positions are deleted when you stop driving (if Open Rails closes unexpectedly, after an hour at most).
- Radio voice is not stored. The room chat is forgotten when the room empties. «SelectOR open» reports are deleted after 2 days. The room server's technical logs overwrite themselves (when they reach 20 MB).
- When you delete your account, your profile, photo, licence, notifications and chat messages are erased. Company services and transactions are kept without your name, because they are part of the company's accounts.
- Contact-form messages are kept only as long as needed to deal with the request.
Your rights
You can view, correct and delete your data:
- To change your username, go to Companies → My account → Edit name; your photo and the live map, in My profile.
- To delete your account, go to Companies → My account → Delete my account…. Your password is required. If you are a company's only manager, you must first appoint another manager or delete the company.
- For any other request (a copy of your data, objecting to processing…), use the contact form.
If you believe your rights have not been respected, you can complain to the data-protection authority of your country; in Spain, the AEPD.
Changes
If this policy changes, this page and its date will be updated. Important changes will also be announced in SelectOR's release notes.