Who is responsible
AGI Solutions, LLC, at the address below, operates this website and is responsible for its handling of personal data. Contact support@learn-to-drive.com for privacy questions or rights requests.
Practice without an account
Your answers, simulator results, preferences, learning profile and driving logs are saved in browser storage. You can export and reset local learning progress on the Progress page, or clear this site’s data in your browser. Your browser still sends connection information, including an IP address, when loading the site.
Optional accounts
If you request an email link, we process your email address and language to deliver it through Microsoft Azure Communication Services. Links expire after 15 minutes. Confirmation creates or accesses your account; the essential session cookie lasts up to 30 days. Signing out revokes that session. A confirmed account can submit learning events to our database. If you choose to save an optional theory exam date and learning language in your account profile, we store them with your account to show your exam countdown and daily pace; you can change them on your account page, and we delete them with your account on request. If you are signed in and tick the optional box when you start a Theory Pass checkout, we store that choice together with the order and may send you one email reminding you of that purchase if you do not finish it; you can unsubscribe with one click in that email, we rely on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time, and the email is sent through our email service provider Azure Communication Services (Microsoft). If you opt in to the optional practice reminders in your account (we first send one confirmation email, a double opt-in), we send at most 3 short reminders in any 7 days, each with a one-click unsubscribe link; this also rests on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time, and these emails are sent through Azure Communication Services (Microsoft) as well. Signing out or clearing browser storage does not delete these server records.
Purpose and legal basis
We process requested account and learning features to provide the service you ask for. We use limited connection information and hashed rate-limit identifiers for our legitimate interests in security, abuse prevention and reliable operation. Optional device-location access is requested through your browser only when you start the BF17 drive lock; you can refuse or revoke that permission. Coordinates are not saved by the application. We do not use learning results for decisions that produce legal or similarly significant effects.
Providers and location
The application and PostgreSQL database run on Microsoft Azure in Germany West Central. Microsoft Azure also provides transactional email and backup storage. Cloudflare provides domain/DNS services and routes support email to an inbox controlled by the operator. Contacting support shares your message and email address with that route and receiving email provider. The operator is based in the United States and can access support and account data there. Provider processing may also involve other countries. Contact us for information about applicable transfer arrangements; this notice does not claim that all processing stays in Germany.
Payments
Paid checkout is currently closed. When enabled, Stripe will collect payment details on its own hosted checkout; our application does not collect card numbers. The application is designed to retain an order reference, product, amount, currency, payment status and access period. The payment provider and its privacy information will be identified at checkout before you pay.
How long data is kept
Local data remains until you reset or clear it. Account and submitted learning records remain while your account is maintained, unless you request deletion. Expired login and session records are removed in bounded batches during subsequent login requests; expiration prevents use even before cleanup. Encrypted database backups are scheduled for deletion after 14 days under the storage lifecycle policy; deletion is not instantaneous. Operational container logs rotate at a maximum of two 5 MB files per service. Support correspondence is kept while resolving your request and where needed for a legal obligation or dispute. We do not currently apply automatic inactivity deletion to accounts.
Your choices and rights
You may request access, correction, erasure, restriction or a portable copy of your personal data, and object to processing based on legitimate interests. These rights depend on the circumstances and applicable law. You can withdraw optional location permission in your browser without affecting earlier processing. Email support@learn-to-drive.com from your account address; we may need proportionate verification before disclosing data. You may also complain to a data-protection authority, including the authority where you live or work in the EU. A local progress export contains browser data, not a complete server-account export.
Optional visitor analytics
Only if you select Allow analytics, Google Analytics uses cookies to measure visits, page popularity, traffic sources and basic device information. The consent choice is remembered on this device for up to 180 days; Google Analytics cookies are configured for 30 days. We send public page paths and the referring website origin, with query strings and fragments removed. We do not send email addresses, account identifiers or learning records. Account, progress and driving-log pages are excluded. Google receives connection information when its script loads and may process data outside Germany. Advertising storage, personalization and Google Signals are disabled. You can withdraw permission through Analytics preferences in the footer. Refusal does not affect learning or account access.
Attribution and conversion measurement
With your permission, Google Analytics measures visits, campaign sources, practice and simulator use, verified signups, and purchases. Microsoft Clarity records masked clicks and scrolling on public pages. Account, progress and driving-log pages do not load these services. Simple signup and purchase events may be sent on your next public page, without your identity, answers or scores. You can refuse or withdraw at any time.
Only approved campaign codes are retained, in this tab for up to 30 minutes after consent. No arbitrary query strings, account IDs, email addresses, answers or scores are sent. The simulator uses Google Analytics only, without Clarity replay. Account events are buffered in this tab for up to 30 minutes and sent only after you return to a public page while consent remains active. A purchase event requires a server-confirmed paid order; a hashed transaction reference is retained for 30 days to avoid duplicates. Visitors who decline, block analytics or do not return are absent from these conversion reports. Earlier analytics consent must be renewed for this expanded scope. Refusals are preserved.
Microsoft Clarity: heatmaps and session replays
Clarity starts only after you accept the current analytics notice. Earlier Google-only consent does not enable it. We use clicks, scrolling and page layout to understand usability. All page text and form entries are masked before recording. Account, progress and driving-log pages are excluded. Clarity also stays off when a page URL or referring URL contains query parameters or a fragment, or the referring page is a private area of this site. Microsoft receives connection, device and public-page information and may process it outside Germany. Analytics cookie consent is granted only after acceptance; advertising cookie consent stays denied. Clarity uses its own cookie durations. Withdrawing consent through the footer deletes this site’s Google Analytics and Clarity cookies and refreshes the page to unload both services.
Google sign-in with Firebase
You can also choose Google sign-in using Google Firebase Authentication. Google processes your selected account identity and connection information; Firebase keeps an authentication user record, which may include your email, name and profile image. Our server checks the signed identity token and stores your Google account identifier and email to create or connect your Learn to Drive account. We do not request access to Gmail messages, Drive files or contacts, or send learning results to Firebase. Firebase browser authentication is kept in memory and cleared after our own session is established; our essential session cookie lasts up to 30 days. Google may process authentication data outside Germany under its provider terms. This processing provides the sign-in service you request and is separate from optional Analytics consent. Non-Gmail addresses use the email-link option for mailbox verification. You may ask support@learn-to-drive.com to delete your account and the related Firebase authentication record.