Privacy policy

PENDING (set before launch), organisation number PENDING, PENDING (set before launch), is the data controller. Send questions about privacy and your rights to support@drivingtest.se.

• Account: name, email address, password (stored only as a one-way hash, never in plain text) and whether your email address is confirmed. Purpose: create and run your account, sign you in and give support. Legal basis: contract. Kept until you delete the account.
• Sign-ins: a session key in a cookie, timestamps, IP address and information about your browser and device. Purpose: keep you signed in, let you see and end signed-in devices, and protect the account. Legal basis: contract and legitimate interest (security). A session lasts at most 7 days and is removed when you sign out or delete the account.
• Practice data: which questions you answered, your answers and whether they were right, results from exams and games, and which free rounds you used. Purpose: show your progress, choose repetitions and weak spots, and enforce the limit on free rounds. Legal basis: contract. Kept until you delete the account. If you are not signed in, your progress is stored only in your browser.
• Purchases: your email address, which pass you bought, amount, time, the payment's id at Stripe, and proof that you accepted the terms (version and time). Purpose: deliver the pass, refunds and bookkeeping. Legal basis: contract and legal obligation (accounting law). Payment records are kept for seven years, even if you delete your account, but are then detached from your account.
• Support log: when our staff change something on your account, a log entry (who, what, when and why) is saved. Purpose: accountability and security. Legal basis: legitimate interest. Entries are kept for as long as needed to document support cases and security work, and may contain your email address even after the account is deleted.
• Email: confirming your email address, password resets, purchase confirmations and messages about your account. We send no newsletters or advertising. Messages you send us are kept for as long as the case requires.

We only use what is needed for the service to work and for what you choose yourself. We use no analytics, tracking or advertising, which is why we do not show a cookie banner.

• Sign-in cookie (Better Auth): keeps you signed in. It ends when the session expires or you sign out.
• drivingtest_lang: your language choice. Kept for one year.
• Browser storage (localStorage and sessionStorage, keys starting with drivingtest_): theme, language, your progress, exam history, daily streak and whether you hid a reminder. It stays until you clear your browser data or delete your account under Account.

Stripe's payment page (stripe.com) sets its own cookies under Stripe's policy when you pay.

We never sell your data. We only share it with those needed to deliver the service:

• Stripe (Stripe Payments Europe, Ltd.): handles payments. Your card details go directly to Stripe and we do not see them. In some cases Stripe is an independent controller of the data needed for payment, fraud prevention and regulatory compliance.
• Our server and our email service: store the data and send messages for us.
• Google, only if you choose to sign in with Google: we then receive your name, email address and profile picture.
• Authorities, when the law requires it.

The database and servers are located in PENDING.

Stripe and Google may process data outside the EU/EEA. Those transfers are protected by the European Commission's standard contractual clauses or an adequacy decision.

Data is sent encrypted (HTTPS), passwords are stored only as one-way hashes, and staff access is limited to roles whose actions are logged. No system is completely secure. If an incident affects your data we will report it to the Swedish Authority for Privacy Protection (IMY) and inform you when the law requires it.

You have the right to access your data, have incorrect data corrected, have data erased, restrict processing, receive your data in a machine-readable format, and object to processing based on legitimate interest.

• Under Account you can change your name, email address and password, see and end signed-in devices, download your data as a file and delete your account straight away.
• For anything else, or if you need help, write to support@drivingtest.se. We reply within one month.
• You have the right to complain to the Swedish Authority for Privacy Protection (IMY, imy.se).

Deleting your account removes your account, progress and sign-ins immediately. Payment records we must keep under accounting law remain but are detached from you.

Many people practising for the theory test are teenagers. You must be at least 16 to create an account, and if you are under 18 a parent or guardian should approve you buying a pass. We do not collect more information than the service needs.

We make no decisions with legal effect on you based solely on automated processing. The calculation of your pass chance is only guidance for your practice.

We may update this policy. The version and date are at the top. We will tell you about significant changes in the service or by email.

PENDING (set before launch), PENDING (set before launch). Email: support@drivingtest.se.