Privacy policy

What this site collects

Nothing. The web app is a static site hosted on GitHub Pages. It has no analytics, no advertising, no tracking pixels, no cookies set by our code, and no account system. The interactive maps load tiles from OpenStreetMap, and the Tracker shows Big Boy 4014’s last reported position — see Maps & live position below for exactly what those involve.

Your browser stores a single value in localStorage — your theme preference (light or dark) — only if you toggle it. That value never leaves your device.

Hosting & logs

The site is served by GitHub Pages. GitHub may keep its own request logs (IP addresses, user agents) as part of operating its CDN. Those logs are governed by the GitHub Privacy Statement; the project has no access to them.

The custom domain 4014coasttocoast.com resolves via Amazon Route 53. DNS query data is governed by the AWS Privacy Notice.

iOS companion app

The companion iOS app fetches the same public schedule.json from this site and displays it. It does not request location permission, contacts, the camera, or any other sensitive iOS API. Its privacy manifest (PrivacyInfo.xcprivacy) declares no data collection and no tracking.

Schedule data

The schedule is scraped daily from Union Pacific’s public tour page by a GitHub Actions job. That job sees only public web pages and writes a JSON file back to the repository. It does not see any visitor data.

Maps & live position

The maps are drawn in your browser with Leaflet using map tiles from OpenStreetMap. When a map is shown, your browser loads those tiles directly from OpenStreetMap’s servers, which see your IP address as part of serving them — governed by the OpenStreetMap Foundation privacy policy. We attach no identifier to those requests.

On the Tracker page, Big Boy 4014’s last reported position is loaded from a small position.json file served by this site. We fetch that position from Union Pacific’s public tracker on the server side — a GitHub Actions job, the same way the schedule is updated — not from your browser. So viewing the Tracker adds no third-party connection beyond the map tiles above.

Questions or requests

Privacy-related questions, takedown requests, or security reports: revise.oxbows0v@icloud.com. A coordinated-disclosure pointer is published at /.well-known/security.txt.

Changes

This page is versioned in the project’s public git history. If anything material changes about how the site handles data, the change will appear here.