Cookie Policy

1. What Are Cookies?

Cookies are small text files placed on your device (computer, tablet, or mobile) when you visit a website. Think of them as tiny, helpful conductors—they remember your preferences, login status, and other details to make your next visit smoother. They are widely used to make websites work more efficiently and provide information to the site owners.

We also use similar technologies like web beacons, pixels, and local storage (collectively, "cookies" in this policy). Unlike the steam locomotives of yore, these digital tools operate silently in the background.

2. Why We Use Cookies

Our mission is to deliver a rich, accessible, and personalized educational experience about Canada's rail history. Cookies help us achieve this in several key ways:

• Essential Operation: Like the essential coupling between railcars, some cookies are strictly necessary for the website to function. They enable basic features like page navigation and access to secure areas. The website cannot operate properly without them.
• Performance & Analytics: We use these to understand how visitors interact with our content. Which timeline entries are most viewed? How long do users spend studying our engineering diagrams? This data (aggregated and anonymous) helps us improve site layout and content relevance—tracking the traffic, so to speak.
• Functionality: These remember choices you make, such as your preferred language or region for displaying historical maps. They provide enhanced, more personal features.
• Limited Advertising: We may use cookies to manage very limited, non-intrusive advertising related to rail heritage events or publications, ensuring you see relevant information.

3. Types of Cookies We Use

The table below outlines the primary categories of cookies deployed on CanadaRailHistory.com.

4. Your Consent & Control (Your Controls in the Cab)

Compliance with regulations like the GDPR and Canada's PIPEDA is important to us. When you first visit our site, a clear banner will seek your consent for non-essential cookies. You can accept all, reject all, or customize your preferences.

How to manage your settings:

• Initial Banner: Provides clear, granular choices.
• Browser Settings: You can usually delete existing cookies and block new ones. Guides are available for Chrome, Firefox, Safari, and Edge. Be aware that blocking all cookies will significantly impair your experience on our and most other websites.
• Do Not Track (DNT): We respect browser DNT signals for our analytics and third-party tracking, adjusting our data collection practices accordingly.

Withdrawing consent is as simple as clearing your browser's cookies for our site and revisiting to reset your preferences. It's a digital version of starting a new journey.

5. Data Sharing & Third Parties

We do not sell your personal data or browsing history. Data from cookies may be shared only in these specific contexts:

1. Service Providers: With trusted partners who host our website or provide analytics software, under strict data processing agreements.
2. Legal Obligation: If required by law, such as in response to a valid court order.
3. Academic & Heritage Partners: Aggregated, anonymized data about popular content may be shared with museum or university partners for research into public history engagement—never identifying you individually.

Third-party cookies (like those from embedded YouTube videos of historical rail footage) have their own privacy policies. We encourage you to review the policies of these external services.

6. Data Security & Retention

We implement appropriate technical measures—encryption, access controls, regular security audits—to protect cookie data from unauthorized access, disclosure, or loss. It's the digital equivalent of securing a heritage rail yard.

Cookie data is retained only for as long as necessary to fulfill the purposes outlined in Section 2. Analytics data may be kept in aggregated form indefinitely for historical research into website usage trends. Personal data linked to a cookie (like a saved preference) is typically deleted after 13 months of inactivity.

7. International Data Transfers

Our primary web servers are located within Canada. However, some of our service providers may process data in other countries, including the United States. When data is transferred outside of Canada, we ensure safeguards are in place—such as the recipient's participation in the EU-U.S. Data Privacy Framework or the use of Standard Contractual Clauses—to provide a level of protection equivalent to Canadian and European laws.

8. Your Rights (GDPR, PIPEDA, CCPA)

Depending on your location, you may have rights regarding your personal data collected via cookies. For users in the EU (GDPR), UK, California (CCPA/CPRA), and across Canada (PIPEDA), these can include:

To exercise any of these rights, please contact us using the details in Section 10. We will respond within 30 days and may need to verify your identity to prevent unauthorized access.

9. Policy Updates

This policy may be updated periodically—much like a railway timetable is revised. Changes could result from new technologies, legal requirements, or enhancements to our services. We will post the revised policy on this page with an updated "Last Revised" date.

For material changes that affect your rights, we will provide a more prominent notice, such as a site-wide banner or an email notification for registered users. We encourage you to review this page occasionally to stay informed. Your continued use of the site after changes constitutes acceptance of the updated policy.

Last Revised: March 15, 2025