Privacy Policy
This policy explains what RateMyTrain collects when you rate a journey, and what it does not. In short: no account, no name, no phone number, no email, and your PNR is never stored.
Your PNR
Your PNR is used once, to verify your journey. It is sent to our server and passed to a PNR status provider to confirm the train, class, stations, date and booking status.
We never store your PNR. We store only a one-way hash of it, combined with a secret key, so that the same PNR cannot be used to rate twice. The hash cannot be turned back into the PNR.
The provider's answer may be cached for up to 15 minutes, stored under that hash, so that you are not asked to wait again while you fill in the form. PNRs are never written to our logs and never appear in a web address.
What we store with a rating
The train number, travel class, boarding station, destination station and journey date taken from your PNR; your delay, coach and washroom ratings; your comment, if you wrote one; and the time you submitted it.
We do not receive or store passenger names, ages, berth numbers or contact details.
Your IP address
Your IP address is used to limit repeated verification attempts and to detect abuse. With a rating we keep only a one-way hash of the address, not the address itself.
What is shown publicly
Ratings are shown as totals and averages. A comment is shown with the class, the boarding and destination stations, and the month and year of travel. The PNR, the exact date and anything that identifies you are never shown. Please do not put personal details in a comment.
Bot protection and cookies
We use Cloudflare Turnstile to check that requests come from people and not from automated tools. Cloudflare processes technical information about your browser for this purpose under its own privacy policy.
RateMyTrain does not set advertising or tracking cookies and does not sell or share your data for marketing.
Service providers
We rely on a hosting provider, a PNR status provider and Cloudflare to run the site. They process data only to provide those services.
Removing a rating
Because we do not know who you are, we can only find your rating if you give us the PNR it was made with. Write to us with that PNR and we will delete the rating. You also have the rights given to you by applicable law, including India's Digital Personal Data Protection Act, 2023.
Changes
If this policy changes, the new version will be published on this page.