Privacy Policy
Last updated: 11 November 2026
This policy explains what personal data GoCodigo (gocodigo.pt) collects, why, and what your rights are. GoCodigo is run by Dhiraj Shrestha, who is responsible for your data (the "controller" under the GDPR). Contact: [email protected].
What we collect
- Your account: your email address, an automatic display name (shown next to your comments instead of your email), password (stored only as a secure hash), your two-step sign-in settings and your chosen licence category.
- Your study activity: the answers you give in practice and mock exams, your results, your study progress, and any comments you post.
- Security records: when you sign in, we record the time, your IP address and your browser type, to protect your account and spot abuse.
- Donations: the amount, the status and the email address you give at checkout. Card and bank details are handled by Stripe and never reach us.
- Messages: anything you send us by email.
- Usage and ads data: if you allow it, cookies from Google Analytics and Google AdSense (see Cookies below).
Why we use it, and on what legal basis
- To run your account and the site (contract): signing you in, saving your progress, sending activation and security emails.
- To keep the site secure (legitimate interest): sign-in logs, bot protection, preventing spam and abuse.
- To process donations (contract, and our legal duty to keep payment records).
- To understand how the site is used and to show ads (your consent): Google Analytics and Google AdSense. You can change your choice at any time with the "Cookie settings" link at the bottom of every page.
We don't sell your personal data.
Who we share it with
We use these service providers, who process data for us under their own data-protection terms:
- Our hosting provider, which runs the server and database.
- Brevo (Sendinblue SAS, France), to send account emails.
- Cloudflare Turnstile, to check sign-up and sign-in forms are filled in by people, not bots.
- Stripe, to process donations.
- Google: Google Tag Manager, Google Analytics 4 and Google AdSense (only with your consent), and Google Fonts, which loads the site's typeface from Google's servers.
Some of these companies may process data outside the European Economic Area, for example in the United States. When they do, they use safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
Cookies
- Necessary cookies keep you signed in, protect forms against forgery and remember your cookie choice. The site doesn't work without them, so they don't need consent.
- Analytics cookies (Google Analytics, e.g.
_ga) count visits and show which pages and features are used. We don't send your name or email to Google Analytics.
- Advertising cookies (Google AdSense) show ads and measure them. If you don't consent, Google may still show non-personalised ads, which use limited data. See how Google uses data from sites that use its services.
Analytics and advertising cookies are only set if you accept them in the cookie banner.
How long we keep it
- Account and study data: while your account exists. If you ask us to delete it, we delete it within 30 days.
- Sign-in records: 12 months, then deleted.
- Donation records: as long as Portuguese tax and accounting law requires (up to 10 years).
- Google Analytics data: 14 months.
Your rights
Under the GDPR you can ask us to see, correct, delete or export your personal data, to restrict or object to how we use it, and you can withdraw consent at any time. Email [email protected] from the address on your account and we'll reply within one month.
You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).
Children
GoCodigo is meant for people preparing for a driving licence. It isn't aimed at children under 16, and we don't knowingly collect their data.
Changes
If we change this policy, we'll update the date at the top. For important changes, we'll also tell signed-in users on the site.
