TSW6Ti
UK GDPR & Privacy Updated 12 November 2026 DOCX · 18.8 KB

TSW6Ti Privacy Policy

How TSW6Ti collects, uses, secures, and manages your personal and telemetry data.

Download (.docx)

Train Sim World 6 Telemetry Interface (TSW6Ti) is a web companion, live telemetry dashboard, and drive-recording platform for Dovetail Games' Train Sim World 6. TSW6Ti is an independent fan-built service and is not affiliated with, endorsed by, or operated by Dovetail Games.

TSW6Ti acts as the data controller for the personal and telemetry data processed when you use our website and web application. This Privacy Policy explains what data we collect, how we use and protect it, how long we retain it, and what rights you have under UK data protection law.

Topics:

  • What data do we collect?
  • How do we collect your data?
  • Lawful bases and how we use your data
  • Browser storage and cookies
  • How do we store and secure your data?
  • Data retention and automated deletion
  • Data sharing and third-party services
  • Marketing and communications
  • What are your data protection rights?
  • Privacy policies of other websites
  • Children's privacy
  • Changes to our privacy policy
  • How to contact us
  • How to contact the appropriate authorities

TSW6Ti collects only the minimum data needed to authenticate your account, connect to your simulator, remember your workspace preferences, handle support enquiries, and save journeys you choose to record:

Account & Authentication Information:

  • Chosen Username: Your selected username (between 2 and 64 characters).
  • Password Hash: A salted cryptographic hash of your chosen password (minimum 8 characters; plaintext passwords are never stored).
  • Session Tokens: SHA-256 hashes of active Bearer session tokens together with an expiry timestamp.

Saved Game Connections (Encrypted at Rest):

  • Game Host / IP Address: The IP address or hostname of your computer running Train Sim World 6 (port 31270 by default).
  • DTGComm API Key: The DTGCommKey required to read telemetry from your Train Sim World 6 game instance.

Dashboard Preferences, Recordings & Support Enquiries:

  • Workspace Configuration: Your saved dashboard widget layout, selected UI theme, custom accent colour, preferred speed unit (MPH/KPH), and recording retention preference.
  • Telemetry Recordings: Only when you explicitly start and save a recording: recording title, real-world start/end times, simulation time, duration, sample count, train name, route and station metadata, distance travelled, speed/acceleration/braking summary metrics, overspeed counts, and second-by-second telemetry samples.
  • Support Enquiries (/contact): When you submit the Contact Support form: enquiry topic, optional name/username, optional reply email address, subject, message body, submission timestamp, and your account link if you are signed in.

What we do NOT collect:

  • We practise strict data minimisation. Registration does not require an email address, legal name, postal address, date of birth, phone number, payment details, or Steam/Epic/console account credentials.
  • Live telemetry displayed on the dashboard while you drive is streamed directly from your configured game API and is not recorded or stored on our servers unless you actively choose to save a journey recording.
  • Our web server anonymises client IP addresses in standard HTTP access logs, uses salted in-memory ephemeral hashes only for short-term abuse rate limiting, and never captures browser fingerprints or advertising identifiers.

You directly provide TSW6Ti with all personal and telemetry data we store. We collect and process data only when you deliberately:

  • Register an account, log in, or update your username or password on the Account page.
  • Add, select, or remove a Train Sim World 6 connection IP address and DTGCommKey.
  • Customise your dashboard module grid, theme, accent colour, speed units, or recording retention setting.
  • Start and save a drive telemetry recording, or submit a support/GDPR enquiry via /contact.

Under the UK GDPR (Article 6), we rely on Performance of a Contract (providing the TSW6Ti account, connection, custom dashboard, and recording features you sign up to use) and Legitimate Interests (securing user accounts, preventing brute-force/spam abuse, and answering support enquiries). Specifically, we use your data to:

  • Manage your account and security: Authenticate logins using salted password hashes and expiring session tokens so only you can access your account data.
  • Connect to your simulator: Decrypt your saved IP address and API key on demand when you connect so the interface can read live telemetry from Train Sim World 6.
  • Restore your custom workspace: Save your dashboard layout, theme, accent colour, and unit preferences between visits.
  • Record, replay, and export journeys: Store recorded drives, calculate summary metrics, render interactive replays, and generate JSON, ZIP, or PDF downloads on request.
  • Handle support & GDPR enquiries: Log enquiries sent via /contact and forward a copy to our private support Discord channel so we can respond promptly.

TSW6Ti does not use advertising cookies, analytics cookies, or third-party tracking cookies.

Instead, TSW6Ti uses strictly necessary browser storage technologies solely to keep the application functioning reliably:

  • Local Storage (localStorage): Stores your session token (tsw6ti_session_token), active game connection details (tsw6ti_active_connection), UI theme (tsw6ti_theme), accent colour (tsw6ti_accent_color), and speed unit preference (tsw6ti_speed_unit).
  • Session Storage (sessionStorage): Temporarily stores active live telemetry state (tsw6ti_telemetry_state), active recording flag (tsw6ti_is_recording), and recording start time (tsw6ti_recording_started_at) while your browser tab is open.
  • IndexedDB (tsw6ti_recorder_v1): Temporarily buffers recorded drive telemetry samples locally in your browser during an active recording before final upload to the server.

When you click Logout or permanently delete your account, TSW6Ti automatically clears all listed keys from localStorage and sessionStorage and deletes the tsw6ti_recorder_v1 IndexedDB database. Sensitive API responses also include Cache-Control: no-store headers.

TSW6Ti protects your data using technical and organisational security measures:

  • Access-Controlled Database Storage: User accounts, hashed session tokens, encrypted connection credentials, recording metadata, and support enquiries are stored in a secured SQLite database on our server. Passwords are stored strictly as salted Werkzeug cryptographic hashes.
  • Authenticated Encryption at Rest: Saved game connection IP addresses and DTGComm API keys are encrypted before storage using an HMAC-SHA256 CTR stream cipher with Encrypt-then-MAC integrity verification, protected by a restricted server-side encryption key.
  • Segmented Config & Compressed Recording Files: Your dashboard preferences and gzip-compressed telemetry payloads are stored in segregated server storage directories with strict per-user ownership checks on every request.
  • HTTP Security & Abuse Protection: We apply defensive HTTP headers (X-Content-Type-Options: nosniff, X-Frame-Options: SAMEORIGIN, Referrer-Policy), disable debug mode in production, anonymise HTTP access log IP addresses, rate-limit failed logins, registrations, and contact submissions, and restrict public static asset serving.

We apply strict retention limits so personal and telemetry data are not kept longer than necessary:

  • Login Sessions: Authentication sessions expire automatically after 7 days. Expired session rows are purged automatically on server startup and periodically while the server runs.
  • Telemetry Recordings: By default, finished recordings are automatically deleted 365 days after completion. From your Account & Privacy Settings (/account) page, you can choose your own retention window (30, 90, 180, or 365 days, or keep until manually deleted, subject to any maximum limit enforced on the platform).
  • Support Enquiries: Enquiries stored in our database are automatically purged after 180 days (unless configured differently or erased sooner upon account deletion). Discord webhook notification copies delivered to our private support channel are managed separately within Discord.
  • Immediate Deletion: Lowering your recording retention window immediately removes older recordings and their compressed files. Deleting an individual connection or recording removes it immediately, and deleting your account immediately erases your user record, sessions, connections, dashboard configuration, saved recordings, linked support enquiries in our database, and local browser storage.

TSW6Ti never sells your personal data and never shares your account details, connections, or recordings with advertisers, data brokers, analytics platforms, or sponsors.

  • First-Party Hosted Libraries: All frontend scripts, stylesheets, and icon fonts (Bootstrap, Font Awesome, jQuery, Chart.js, SortableJS, marked, and DOMPurify) are served directly from our own server rather than external third-party CDNs, meaning loading pages does not leak your visit to third-party script hosts.
  • Support Notification Sub-Processor (Discord): When you submit an enquiry via /contact, a formatted notification (including your topic, optional name/reply email, logged-in username if signed in, subject, and message) is forwarded via HTTPS webhook to a private Discord support channel operated by TSW6Ti solely to review and reply to your enquiry. Discord (Discord Inc.) processes webhook payloads under Discord's own privacy policy and applicable international transfer safeguards.
  • Simulator Connection: Live telemetry communication connects exclusively with the Train Sim World 6 game host and port that you configure.

TSW6Ti does not send promotional emails, newsletters, or marketing messages. Because accounts do not collect email addresses or phone numbers, you will only ever receive a reply if you choose to provide an email address in a /contact support enquiry.

Under the UK GDPR, you have full control over your personal data and are entitled to the following rights:

  • The right of access: Obtain a copy of all personal and telemetry data TSW6Ti holds about you. You can download a complete machine-readable .zip archive or .json metadata export (including your account info, connections, dashboard config, recordings, and linked support enquiries) directly at any time from /account.
  • The right to rectification: Correct inaccurate or outdated details. You can update your username, password, saved game connections, dashboard configuration, and retention policy yourself via /account and /settings.
  • The right to erasure: Delete individual connections or recordings at any time, or permanently delete your entire account and all associated server data from /account.
  • The right to restrict processing: Ask us to restrict processing of your data in certain circumstances, or remove saved connections and stop recording at any time.
  • The right to object to processing: Object to processing carried out under legitimate interests in certain circumstances.
  • The right to data portability: Export your dashboard configuration, support enquiry records, and decompressed telemetry recordings in standard JSON format from /account to transfer elsewhere.

If a request cannot be completed directly through self-service on /account (for example, deleting a prior Discord webhook copy of a support message), please contact us via /contact; we have one calendar month to respond to valid requests.

TSW6Ti pages or reference guides may contain links to external websites (such as Dovetail Games resources, Discord, or regulatory bodies). This Privacy Policy applies solely to TSW6Ti; if you follow an external link, you should review that website's own privacy policy.

TSW6Ti is not directed at children under the age of 13 (or the minimum age of digital consent in your jurisdiction), and we do not knowingly collect personal data from children. If we become aware that an account was created without the required consent, we will promptly delete the account and all associated data.

TSW6Ti keeps this Privacy Policy under regular review and publishes any updates directly on the /privacy-policy page and downloadable document. We encourage you to review this page periodically.

This privacy policy was last updated on November 12th, 2026.

If you have any questions about this Privacy Policy, the personal data we hold on you, or would like to exercise any of your data protection rights, please reach out through our website:

  • Contact Support: Submit an enquiry via the /contact page linked in the footer.

Should you wish to report a complaint or if you feel that TSW6Ti has not addressed your data protection concern in a satisfactory manner, you may contact the Information Commissioner's Office (ICO):

  • Website: https://www.ico.org.uk
  • Helpline number: 0303 123 1113
  • Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF