Back to Train

Privacy Policy

Last Updated: August 16, 2026

Introduction

Welcome to Midnight Express (also referred to as "Train"), accessible at train.hereco.in. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our service.

Information We Collect

Account and Session Data

Train enables people to listen to music together in real-time. To facilitate this functionality, we collect and process:

  • Session identifiers to track your presence in the shared listening room
  • Temporary connection data to enable real-time synchronization via WebSocket
  • User agent information to optimize the experience for your device (mobile/desktop)
  • Playback state information (current track, position, play/pause status) shared with other users in the room

Important: Train does not require user accounts, registration, or authentication. All session data is temporary and automatically deleted when you disconnect.

Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience:

  • Session Cookies: Essential cookies that maintain your connection and synchronization state
  • Analytics Cookies: Google Analytics cookies that help us understand usage patterns (see below)
  • Advertising Cookies: Google AdSense cookies for personalized advertising (see below)
  • Service Worker Cache: Local caching through Progressive Web App (PWA) technology to improve performance

Third-Party Services

Train integrates with the following third-party services:

Google Analytics

We use Google Analytics (ID: G-R7PBCYXGZR) to understand how users interact with Train. Google Analytics collects:

  • Pages visited and features used
  • Time spent on the service
  • Browser type and device information
  • Geographic location (country/city level)
  • Referral sources

Google Analytics uses cookies to track this information. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Google AdSense

Train displays advertisements through Google AdSense (Publisher ID: ca-pub-1703467433749208). Google AdSense uses cookies and similar technologies to:

  • Display personalized ads based on your browsing history and interests
  • Measure ad performance and engagement
  • Prevent fraudulent ad clicks

You can manage your ad preferences and opt out of personalized advertising by visiting the Google Ad Settings page or the Digital Advertising Alliance opt-out page.

YouTube

Train uses the YouTube IFrame API to stream music videos. When you use Train:

  • YouTube may collect information about videos you watch
  • YouTube cookies may be set in your browser
  • Your video playback may be associated with your Google/YouTube account if you're logged in

YouTube's data collection is governed by Google's Privacy Policy.

Sentry Error Tracking

We use Sentry to monitor application errors and performance. Sentry may collect:

  • Error messages and stack traces
  • Browser and device information
  • Session replay data (without sensitive information)
  • IP addresses (automatically anonymized)

This data helps us identify and fix bugs to improve your experience. Learn more in Sentry's Privacy Policy.

Redis Data Storage

We use Redis for temporary server-side data storage:

  • Current playlist and track information
  • Active user presence data
  • Synchronized playback state

All Redis data is ephemeral and automatically expires. No personal identifying information is permanently stored.

How We Use Your Information

We use the collected information to:

  • Provide and maintain the synchronized listening experience
  • Enable real-time multiplayer features (SharePlay, games)
  • Optimize performance for different devices and screen sizes
  • Analyze usage patterns to improve features and user experience
  • Monitor and fix technical issues and errors
  • Display relevant advertisements
  • Comply with legal obligations

Data Sharing and Disclosure

We do not sell your personal information. We share data only in the following circumstances:

  • With Other Users: Your playback state and presence information is visible to other users in the same listening room
  • With Service Providers: Third-party services mentioned above (Google Analytics, AdSense, YouTube, Sentry) receive data as described in their sections
  • For Legal Reasons: We may disclose information if required by law, court order, or government request
  • To Prevent Harm: We may share information to prevent fraud, abuse, or harm to Train, our users, or the public

Data Retention and Deletion

Train is designed with privacy in mind:

  • Session Data: Automatically deleted when you disconnect or after session timeout
  • Redis Cache: Expires automatically based on time-to-live settings (typically minutes to hours)
  • Analytics Data: Retained by Google Analytics according to their data retention policies (default 26 months, can be configured)
  • Error Logs: Retained by Sentry for 90 days, then automatically deleted
  • Cookies: Expire based on their individual expiration dates (session cookies expire when you close your browser)

Since we don't collect accounts or personal profiles, there is no persistent data to delete. You can clear cookies through your browser settings at any time.

Your Choices and Rights

Cookie Management

You can control cookies through your browser settings. Note that disabling certain cookies may impact functionality:

  • Essential session cookies are required for Train to function
  • Analytics and advertising cookies can be disabled without affecting core features

Opt-Out Options

Regional Rights

Depending on your location, you may have additional rights:

  • European Union (GDPR): Right to access, rectification, erasure, data portability, and restriction of processing
  • California (CCPA): Right to know what personal information is collected, delete personal information, and opt out of sale (we do not sell personal information)
  • Other Jurisdictions: Rights as provided by applicable local laws

Security

We implement reasonable security measures to protect your information:

  • HTTPS encryption for all data transmission
  • Content Security Policy (CSP) to prevent cross-site scripting attacks
  • Regular security updates and monitoring
  • Secure WebSocket connections for real-time synchronization
  • Limited data retention to minimize exposure

However, no internet transmission is completely secure. We cannot guarantee absolute security of data transmitted to or from Train.

Children's Privacy

Train is not directed to children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately, and we will take steps to delete such information.

International Data Transfers

Train may be accessed from anywhere in the world. By using Train, you acknowledge that your information may be transferred to and processed in countries other than your own, including the United States, where data protection laws may differ. We take reasonable steps to ensure your data receives adequate protection.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of Train after changes constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Additional Resources