Privacy Policy

Last updated: October 9, 2026

1. Data we collect

• Account: name, email, password hash (never stored in plain text).
• OAuth: Google / Facebook ID, name and email when you use social login.
• Practice: test attempts, answers and scores to show your progress.
• Payments: processed by Stripe. We store only customer / subscription IDs, never card numbers.
• Technical: login cookies, remember-me tokens, and basic rate-limit logs for security.

2. How we use it

To provide practice tests, manage Premium access, prevent abuse, and improve the service. We do not sell personal data.

3. Cookies

We use strictly-necessary session cookies, an optional 30-day remember-me cookie, and Stripe checkout cookies. No advertising trackers.

4. Retention & deletion

Guest preview accounts use throwaway addresses. Contact us at learn@drive.com to request export or deletion of your account and test history.

5. Security

Passwords are hashed with bcrypt, sessions use HttpOnly SameSite cookies, forms use CSRF tokens, and login is rate-limited.

6. Contact

Drive Driving School — learn@drive.com