Privacy Policy

What we collect

When you create an account, we store your email address, an optional display name, and your theme preference. As you study, we record your practice and exam attempts, the topics you cover, and your progress over time. This is how the readiness score and weak-area recommendations work. If you purchase Premium, Stripe processes your payment directly; we never see or store your full card number.

What we deliberately don't collect

We don't ask for your exact date of birth, home address, or driver's licence number. These aren't needed to deliver the product, so we don't request them.

Centre finder and maps

The centre finder asks for your location only when you select “Use my location.” Your coordinates stay in your browser and are used there to rank nearby centres; we do not store them, add them to links, or send them to our analytics. A typed city or postal code is also not stored by DrivingDecoded. When the finder page displays its Google map, or when you submit a postal code for Google geocoding, Google receives the information needed to provide that map or lookup, along with the normal network information any external service receives. Directions open in Google Maps only when you select them.

Analytics

We track basic product usage, including when a diagnostic starts, a question is answered, or a purchase completes, to understand how the product is used and improve it. This runs on our own infrastructure, not a third-party analytics vendor: your practice history never leaves our database. We never log question text or free-form personal content in analytics events.

When you first arrive on a public page, we may keep a short-lived, first-party acquisition record so we can understand whether public learning resources are being found. It contains a random ID, the first public page path, the referring site's hostname, any validutm_source, utm_medium, and utm_campaign values, and the capture time. It does not contain a full referrer URL, search terms, or arbitrary query parameters. We use this context for diagnostic and checkout attribution inside DrivingDecoded; we do not send it to Stripe.

Cookies and local storage

We use local storage to remember your theme preference and cookies to keep you signed in. We also use the 30-day, first-party acquisition cookie described above. Core learning and purchase features continue to work if you block cookies or JavaScript. We don't use third-party advertising or tracking cookies.

Who we share data with

We use a small set of service providers to run DrivingDecoded: Clerk (sign-in), Stripe (payment processing), Neon (database hosting), Resend (transactional email), Sentry (error monitoring), Upstash (rate limiting, to prevent abuse), and Google Maps when the centre finder displays a map or when you choose a directions link or postal-code lookup. Each only receives what it needs to do its job, and none of them are permitted to use your data for their own purposes.

Minors

Ontario's G1 test is available from age 16, so we expect some learners here to be under 18. If you're under 18, a parent or guardian must complete any purchase on your behalf. We don't knowingly collect personal information from children under 13.

Your rights

You can review, correct, or delete your account data at any time from Settings, or by contacting us. Deleting your account removes your profile and practice history; we retain payment records only as long as required for tax and accounting purposes.

Contact

Questions about this policy: privacy@drivingdecoded.ca.