Cookie Notice — Draft
DRAFT — not yet approved for final publication. This notice describes the session cookie identified in the application code. The live site and any third-party services must still be checked for additional cookies or similar technologies.
RailStock Register is operated by Ride on Railways Ltd. This notice explains how cookies are used when you access the register.
What is a cookie?
A cookie is a small piece of information that a website asks your browser to store. Some cookies are necessary for a website to work; others may be used for optional purposes such as analytics.
Essential login cookie
| Cookie | Purpose | Duration |
|---|---|---|
rsr_session | Maintains your secure login session and associates requests with your authenticated account. | Session cookie (configured with no fixed expiry; browser behaviour may vary). |
The application code configures this cookie with Secure, HttpOnly and SameSite=Lax attributes, and restricts its path to /register/. These settings help protect the login session.
The session cookie is intended to be strictly necessary to provide the private register you request. Consent is generally not required for strictly necessary cookies under UK cookie rules, but information about their use must still be provided. We therefore do not ask you to accept or reject this essential cookie.
Security tokens
RailStock uses a server-side cross-site request forgery (CSRF) token associated with your session to help protect forms. This token is not a separate browser cookie.
Other cookies and technologies
We have not yet completed a check of the live website, hosting services, public application forms and any embedded third-party content. This notice must be updated if those services set additional cookies or use comparable browser storage. Any non-essential cookies or similar technologies requiring consent must not be activated before valid consent is obtained.
Managing your cookies
You can view, block or delete cookies using your browser's privacy settings. If you block or delete rsr_session, you may be signed out or unable to use the private register normally.
Further information
For information about how personal data is handled, read our Privacy Notice. For questions about RailStock Register, contact esales@rideonrailways.co.uk.
Last reviewed: 28 October 2026 — draft, pending live-site verification.