Privacy Policy

Last updated September 21, 2026

This Privacy Policy explains how OntarioDriveTestMap ("we," "us," "our") collects, uses, and shares personal information when you use this site at ontariodrivetestmap.fyi. OntarioDriveTestMap is an independent, community-built project — not a registered company — currently operated by its creator. If you don't agree with this policy, please don't use the site. Questions or requests: privacy@ontariodrivetestmap.fyi.

1. What information do we collect?

Information you provide directly

When you sign in and use the site, we collect:

• Name and email address — provided by Google when you sign in (see below).
• A unique Google account identifier — used to recognize your account on future sign-ins; not your Google password, which we never see.
• Username — chosen by you, shown publicly instead of your real name.
• Content you post — forum posts, discussion posts, comments, votes, and any photos you attach to them.
• Route trace data — GPS coordinate traces and route submissions you voluntarily provide through the route-submission feature, used to build and corroborate DriveTest route maps. This is route-shape data you actively submit about a driving route, not a record of your own movements.

Information collected automatically

Standard web server logs (IP address, browser type, request timestamps) are generated automatically by our hosting infrastructure for diagnostic and security purposes. We do not read, store, or analyze this data ourselves.

We also run a minimal, first-party page-view counter, built and hosted entirely by us — not a third-party analytics SDK. It records only the page path and a timestamp for each page load (e.g. "/?centre=walkley" at a given time). It does not record your IP address, a device or session identifier, your browser/user-agent, or anything else that could tie a page view back to you — there is no cookie or ID involved, so we have no way to distinguish your visits from anyone else's or build a profile of your activity. This data is used only in aggregate, to compute basic traffic counts (e.g. "142 page views this week") included in an internal weekly summary described below. It is never shared with any third party.

Location data

The drive-along practice mode uses your browser's geolocation API to show your live position on the map during a practice session. This happens entirely in your browser — your live location is never sent to or stored on our servers.

Sensitive information

We do not collect or process sensitive personal information (health, financial, biometric, genetic, racial/ethnic, religious, political, or similar data), and we do not collect government ID numbers, driver's licence numbers, or payment information — even though this is a driving-test app, we never ask for your actual licence number.

Information from other sources

We do not purchase or receive data about you from marketing partners, data brokers, public databases, or advertising networks. The only outside source of information about you is Google, when you choose to sign in (see "Google Sign-In" below).

2. How do we use your information?

We use personal information only for these purposes:

• To provide the service. Your account data lets you sign in, submit routes, report corrections, post in the forum and discussion, set reminders, and manage your own account. Reading route maps and using practice drive don't require an account.
• To enable user-to-user communication. Your username and posted content are shown to other users so the forum and discussion features work, and to generate in-app notifications (mentions, replies).
• For community moderation and route trust scoring. Votes, reports, and submissions power automated content moderation and the confidence scoring (confirmed / predicted / insufficient evidence) applied to community-submitted route data.

We do not use your information for advertising, marketing communications, or profiling, and we never sell or rent it.

3. What legal bases do we rely on?

Where applicable law requires a legal basis for processing, we rely on:

• Performance of a contract — processing needed to provide the service you've asked to use (your account, posts, submissions).
• Consent — for anything optional, such as posting content or submitting route data; you can withdraw this by deleting the relevant content or your account.
• Legal obligation — where we must comply with a lawful request, such as a court order.

4. When and with whom do we share information?

We do not sell personal information and we do not share it with marketing or business partners. We only disclose information to the small set of infrastructure providers necessary to run the site:

Other users. Content you post publicly (forum posts, discussion posts, comments, votes) is visible to other users of the site, shown under your username or an auto-generated pseudonym — never your real name, email, or photo. Nothing you do here is posted back to Google or any other platform.

Business transfers. If this project is ever transferred, sold, or its assets acquired, user information may be transferred as part of that transaction, subject to this policy.

Legal requirements. We may disclose information if required to comply with a legal obligation, protect our rights, or prevent harm.

5. Cookies and tracking

We set exactly one cookie: a strictly-necessary, httpOnly, Secure, SameSite=Lax session cookie that keeps you signed in. There is no advertising, third-party analytics, or cross-site tracking technology anywhere on this site. The only usage measurement we run is the anonymous, cookie-free, first-party page-view counter described above — it doesn't use cookies and isn't "tracking" in the sense of identifying you or following you across sites. Full cookie details are in our Cookie Policy.

Admin weekly summary emails

Regular users of this site never receive any email from us. Site administrators may optionally opt in, in their own account settings, to receive a weekly summary email containing aggregate site activity (e.g. new posts, new route submissions, anonymous page-view totals) — never any individual user's personal information. These emails are sent via Resend, a transactional email provider, to the administrator's own account email address. An administrator can turn this off at any time from the same toggle used to turn it on.

6. Google Sign-In

Signing in uses Google Identity Services. When you sign in, we receive your name, email address, and a unique Google account identifier directly from Google — verified server-side against Google's own public keys. We never see or store your Google password. We do not request access to your contacts, files, or any other Google data. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

7. Is your information transferred internationally?

Our servers and database are hosted in the United States. If you're located elsewhere, including in the EEA, UK, or Switzerland, your information will be transferred to and processed in the United States. We take reasonable measures to protect your information consistent with this policy regardless of where it's processed.

8. How long do we keep your information?

We keep your information for as long as your account is active. There is currently no automatic deletion after a period of inactivity — retention is tied to your account existing, not a fixed timer. When you delete your account (see below), your identifying information is scrubbed immediately; your past posts and comments remain visible to preserve other users' discussion threads, but are reattributed to an anonymous placeholder rather than your identity.

9. How do we keep your information safe?

We never collect or store passwords — sign-in is handled entirely by Google, with tokens verified server-side. Your session is stored in an httpOnly cookie, inaccessible to page scripts. Application secrets are kept out of source control. No electronic storage or transmission method is 100% secure, and we can't guarantee absolute security, but we don't collect more than we need and we don't hand it to third parties beyond the infrastructure providers listed above.

10. Your privacy rights

Depending on where you live, you may have rights to access, correct, or delete your personal information, restrict or object to its processing, or receive a copy of it. You can exercise most of these rights yourself, at any time, by deleting your account from the site (see below) or by emailing privacy@ontariodrivetestmap.fyi for anything else. We'll respond to legitimate requests in accordance with applicable law.

If you're in the UK or EEA and unhappy with how we've handled a request, you can complain to your local data protection authority (in the UK, the Information Commissioner's Office).

11. Do-Not-Track signals

Because there's no common standard yet for how sites should respond to browser Do-Not-Track signals, we don't currently respond to them differently — though as noted above, we don't run any tracking technology regardless.

12. No government affiliation

OntarioDriveTestMap is an independent, community-built informational tool. It is not affiliated with, endorsed by, sponsored by, or operated on behalf of DriveTest, Serco Canada Inc., or the Ontario Ministry of Transportation. Any personal information you provide is collected and processed solely by OntarioDriveTestMap for the purposes described in this policy, and is never shared with or accessible to those organizations as a result of using this site.

13. Updates to this policy

We may update this policy from time to time; the "Last updated" date at the top will change accordingly. Material changes will be posted prominently on the site.

14. Contact us

Email: privacy@ontariodrivetestmap.fyi
Ottawa, Ontario, Canada

OntarioDriveTestMap is currently an unincorporated individual project, not a registered company — this address reflects the project's general location, not a formal business address.

15. Review, update, or delete your data

You can delete your account and personal data at any time by signing in and using the "Delete account" option in the site header — this is self-service and takes effect immediately. For any other access, correction, or deletion request, email privacy@ontariodrivetestmap.fyi.

← Back to OntarioDriveTestMap · Terms of Service · Cookie Policy