Privacy Policy

Who we are

SwapTest is a free online platform that helps UK driving test candidates swap their test dates with each other. This privacy policy explains how we collect, use, store, and protect your personal information when you use our website at www.swaptest.co.uk.

What information we collect

Information you provide

When you register for an account, we collect:

• Full name — to identify you to your swap partner
• Email address — to send you notifications about matches and for account access
• Phone number — shared only with your confirmed swap partner for coordination
• Password — encrypted and stored securely (see Security section below)

When you create a listing, we collect:

• Test centre name — used for matching
• Current test date and time — used for matching
• Preferred date range — used for matching

Information collected automatically

We collect your IP address for rate limiting purposes (to prevent abuse of the platform). We do not use tracking cookies, analytics services, or any third-party advertising trackers.

How we use your information

We use your information solely for the following purposes:

• To create and manage your account
• To match you with suitable swap candidates based on test centre and date preferences
• To send you email notifications about swap requests, match confirmations, and account activity
• To share your contact details (name, email, phone) with your confirmed swap partner — and only after both parties have agreed to swap
• To prevent abuse through rate limiting

We do not: sell your data to third parties, use your data for advertising, share your information with anyone other than your confirmed swap partner, or use your data for any purpose other than operating the SwapTest service.

When your information is shared

Your personal contact details (name, email address, and phone number) are shared with another user only after both you and the other person have agreed to swap. Before that point, other users can only see your test centre, date, and time — never your name, email, or phone number.

We do not share your information with any other third parties, except where required by law (e.g., in response to a court order or legal obligation).

How we protect your information

Password security

Your password is encrypted using bcrypt with salted hashing. This means your password is converted into an irreversible encrypted string before being stored. Even our team cannot see or retrieve your original password. Each password is individually salted, meaning even if two users have the same password, their stored data is completely different.

Data transmission

All data transmitted between your browser and our servers is encrypted using HTTPS (TLS/SSL). This means your information cannot be intercepted by third parties during transmission.

Database security

Our database is hosted on secure, managed infrastructure with encryption at rest. All database queries use parameterised statements to prevent SQL injection attacks. Access to the database is restricted and protected by authentication credentials.

Rate limiting

We use rate limiting to prevent automated attacks, brute-force login attempts, and abuse of the matching system.

How long we keep your data

Your account data is kept for as long as you have an active account. Your listing data is kept for as long as the listing is active or has been part of a completed swap.

If you wish to delete your account and all associated data, please contact us at privacy@swaptest.co.uk and we will process your request within 30 days.

Your rights

Under UK data protection law (UK GDPR), you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data
• Restriction — ask us to limit how we use your data
• Portability — request your data in a portable format
• Objection — object to our processing of your data

To exercise any of these rights, contact us at privacy@swaptest.co.uk.

Third-party services

We use the following third-party services to operate SwapTest:

• Resend — for sending email notifications (processes your email address)
• Neon — for database hosting (stores your account and listing data)
• Vercel — for website hosting (processes your requests)
• Upstash — for rate limiting (processes your IP address temporarily)

Each of these services has their own privacy policy and processes data in accordance with GDPR requirements.

Children

SwapTest is intended for users who are at least 17 years old (the minimum age to take a driving test in the UK). We do not knowingly collect data from children under 17. If you believe a child has created an account, please contact us.

Changes to this policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

Contact us

If you have any questions about this privacy policy or how we handle your data, please email us at privacy@swaptest.co.uk.