Privacy Policy

8. Comment function on train detail pages

On individual train pages you can post experiences and delay reports.No registration is required — we store no user account and no password. Providing an e-mail address is optional and only needed if you want to receive the Trustpilot review invitation described below.

What data is stored?

• Name / nickname — freely chosen, shown publicly with the comment.
• Comment text — published after automated moderation (see below).
• Optional for delay reports: travel date, delay in minutes, reason.
• Optional — e-mail address — stored only if you enter it voluntarily AND additionally tick the Trustpilot consent checkbox. Without both steps the field remains empty in the database. The address isnot displayed publicly and is used only for the purpose described in the "Trustpilot review invitation" section below.
• IP address — stored exclusively as a cryptographic hash (SHA-256) with a server-side key, never in plaintext. The hash is used only for anti-spam / anti-abuse purposes (e.g. a limit of 5 comments per hour) and cannot be reversed to recover the original IP.
• Timestamp of submission.

Trustpilot review invitation (optional)

If, when submitting a comment, you enter your e-mail address and tick the relevant consent checkbox, we send you a short confirmation e-mail. That confirmation e-mail is additionally blind-copied (BCC) to a technical Trustpilot address (…@invite.trustpilot.com), so that Trustpilot can subsequently send you an invitation to review zug-ticket-kaufen.de by e-mail.

Legal basis is Art. 6(1)(a) GDPR (consent). Without an active tick in the form,no e-mail is sent and no address is transmitted to Trustpilot.

Provider: Trustpilot A/S, Pilestræde 58, 5th floor, 1112 Copenhagen, Denmark. Data is processed within the EU. Trustpilot's privacy terms are available atlegal.trustpilot.com.

Withdrawal: You can withdraw consent at any time — either via the opt-out link in the Trustpilot invitation mail or by an informal message to the address listed in the imprint. Your stored e-mail address will then be deleted without undue delay.

Automated content moderation

Every submitted comment is automatically reviewed before publication by a self-hosted language model (Ollama / Llama 3.1), which detects spam, abuse and inappropriate content. The review runs on our own servers in Germany; no data is transmitted to external AI providers. Depending on the review outcome, your comment is either published immediately, moved to a manual review queue, or rejected.

Spam protection (ALTCHA)

To prevent automated submissions we use ALTCHA, an open-source captcha replacement based on a cryptographic proof-of-work puzzle. ALTCHA runsentirely on our own servers without any external service embedding, sets no cookies, does not read browser fingerprints, and transmits no data to third parties. The puzzle is solved in the background by your browser; you typically do not notice it.

Legal basis & retention

Legal basis is Art. 6(1)(f) GDPR (legitimate interest in operating a functioning, spam-free community feature). Published comments remain visible indefinitely as they serve other users as information. Rejected or hidden comments are deleted after 90 days.

Your rights

Because we deliberately do not store IP addresses or user identities, we can only identify individual comments by the displayed name/nickname and the text. To request deletion of a specific comment, please contact us at the address listed in the imprint and provide the name, train number, and approximate time of the comment.