Privacy Policy

Version 1.0 - Effective 1 September 2026

1. Who we are

FuehrerscheinUebungen (“we”, “us”, “our”) is the data controller for personal data collected through this website at fuehrerscheinuebungen.netlify.app. We provide a free, unofficial practice tool for the German driving license theory exam and are not affiliated with TUeV, DEKRA, or any official German licensing authority.

Contact: open an issue at github.com/popatkaran/germandrivinglicensetheoryapp

2. What we collect and why

DataPurposeLegal basis (GDPR Art. 6)
Email addressAccount creation, authentication, and transactional emails (verification, password reset)Art. 6(1)(b) - performance of contract
Password (hashed, never stored in plain text)AuthenticationArt. 6(1)(b) - performance of contract
Google account name and email (OAuth only)Authentication via Google OAuth - read-only, not stored beyond sessionArt. 6(1)(b) - performance of contract
Display name (optional)Personalising your account experienceArt. 6(1)(b) - performance of contract
Quiz progress and answer historySaving your practice progress across sessionsArt. 6(1)(b) - performance of contract
IP address and request logsSecurity, fraud prevention, and abuse detectionArt. 6(1)(f) - legitimate interest

We do not sell your data, use it for advertising, or share it with third parties beyond the sub-processors listed in section 3.

3. Third-party processors

We share data only with sub-processors bound by a Data Processing Agreement (DPA) and operating under adequate safeguards:

ProcessorPurposeData transferredSafeguard
Supabase Inc.Database and authenticationEmail, hashed password, display name, quiz progressDPA + Standard Contractual Clauses (SCCs)
Google LLC (OAuth only)Optional authenticationGoogle account email and name - read-onlyGoogle Data Processing Amendment
Netlify Inc.Hosting and CDNIP address, request metadataNetlify Data Processing Agreement

4. Data retention

  • Account data is retained for as long as your account is active.
  • On account deletion, all personal data (authentication record, display name, quiz history) is deleted immediately and permanently.
  • Server logs (IP addresses) are retained for up to 90 days by our infrastructure processors for security purposes.

5. Your rights

Under the EU GDPR and national data protection laws you have the right to:

  • Access - request a copy of the personal data we hold about you
  • Rectification - correct inaccurate data via your account page
  • Erasure - delete your account and all associated data via your account page
  • Restriction - request that we restrict processing of your data
  • Objection - object to processing based on legitimate interest
  • Portability - request a machine-readable copy of your data

To exercise any right not available through your account page, open an issue at github.com/popatkaran/germandrivinglicensetheoryapp. We will respond within 30 days.

6. Cookies

We use only functional cookies necessary to maintain your authenticated session. These are set by Supabase SSR and are HttpOnly, Secure, and SameSite=Lax. No advertising or analytics cookies are in use. No consent banner is required for strictly necessary cookies under the ePrivacy Directive.

7. Complaints

You have the right to lodge a complaint with your national data protection supervisory authority. In Germany this is the Federal Commissioner for Data Protection and Freedom of Information (BfDI).

8. Changes to this policy

We will notify registered users by email if we make material changes. The version number and effective date at the top of this page will be updated. Continued use of the service after notification constitutes acceptance of the updated policy.