Privacy at VeiMester

In short

VeiMester runs no third-party analytics and shows no ads on the site. Visits are counted on the server without cookies – just a date, a page address and a number. The one non-essential script is the Google Ads tag, which measures whether our ads work: it is not loaded until you press “Accept” in the consent banner, and never loaded if you say no.

Everything we store about you exists because a feature you use needs it, and everything is deleted when you delete your account – with one bookkeeping exception described at the end.

What we store about an account

The account details you provide at signup: email address, name, phone, address, post code and city. Your password is never stored in clear text – only a scrypt hash of it. If you sign in with Google, the Google account's ID is stored instead of a password.

Sign-in sessions: one row per sign-in with the time, the device's User-Agent and IP address, so the account page can show which devices are signed in. An account can be signed in on up to two devices at a time – a third sign-in signs out the oldest.

Your progress: mock-exam and sign-drill results, which lessons you have completed or bookmarked, and active reading time in the theory course. This is what makes your progress follow the account across devices.

If you buy an access pass we store the payment reference, the amount, the status and the last four card digits – never the card number itself, which goes straight to Stripe.

Cookies and local storage

Two cookies are strictly necessary: “sid” keeps you signed in for up to 30 days, and “goauth” lives for ten minutes while a Google sign-in is in flight. Neither is used for tracking. If you accept ad measurement, Google Ads also sets its own “_gcl_” cookies – only then.

Your browser additionally keeps a few choices locally on your device – dark mode, language, practice results for signed-out visits and how far you have got in the course. The Android app keeps the same settings locally on your phone. None of it is sent anywhere else.

Third parties

Stripe handles payments: on the checkout page – and only there – Stripe's own script is loaded, and the card details you type go directly to Stripe. If you choose to sign in with Google, Google confirms your identity. The driving-school map fetches map tiles from Kartverket and post-code coordinates from Geonorge.

None of these are used for advertising, and none load on any page other than where their feature is needed.

For how long, and how to delete

Your account is kept for as long as you have one. You delete it yourself, at any time, from the account page – on the website or in the app – and deletion is immediate: progress, sessions and payment history disappear with the account.

The only thing left behind is one nameless line per purchase in our sales records – date, amount, currency and a reference, with no name, no email address and no link to the account. Norwegian bookkeeping law requires us to keep that line.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and to object to processing based on legitimate interest. Deletion you do yourself from the account page; for everything else, write to [email protected]. You can also complain to Datatilsynet, the Norwegian Data Protection Authority.

The controller is Darvishi Digitaltjenester, Oslo. The full privacy policy – every field, every legal basis and every retention period – is under Privacy in the app.