Privacy Policy

Effective date: July 2026

GoCheaper is a free, non-profit, open-source ride-sharing platform operated by Kenn Skjellerup (the data controller). Contact: kennskjellerup@hotmail.com

1. What data we collect

Account data — first name, last name, email address, mobile phone number, profile picture, account type (driver / passenger), hashed password.
Trip data — departure, destination, seats, price, currency, departure time, pickup points, number plate, car picture, notes, payment method.
Booking data — trips you have booked, number of seats, booking date.
Authentication data — an encrypted session stored in the gc_auth HttpOnly cookie (see section 5).

2. Why we collect it

All data is collected solely to provide the ride-sharing service:

Connecting drivers offering rides with passengers looking for them.
Sending transactional emails (OTP login codes, booking confirmations, cancellations).
Displaying your name and profile picture to other users when you participate in a trip.

The legal basis is Article 6(1)(b) GDPR — performance of a contract (providing the service you signed up for).

3. Who can see your data

Other users — when you book a trip, the driver sees your name. When a passenger books your trip, you see their name.
No third parties — your data is not sold, shared with advertisers, or passed to any third party except the email delivery described below.

4. Email delivery

Transactional emails are sent via Gmail SMTP (Google's mail servers). Google processes the email content transiently for delivery purposes. Google's privacy policy applies to that transit: policies.google.com/privacy.

5. Cookies

GoCheaper sets one cookie: gc_auth. It is strictly necessary for authentication — it stores your encrypted session so you stay logged in. It is HttpOnly (inaccessible to JavaScript), Secure, SameSite=Strict, and expires after 90 days. No tracking, analytics, or advertising cookies are used.

6. Data retention

Your personal data is kept for as long as you have an account. When you delete your account, all your data is permanently removed: your profile, your posted trips (passengers are notified), and your bookings (drivers are notified). No backups are kept beyond the deletion.

7. Your rights

Under GDPR you have the right to:

Access — view all your data on the My Profile page.
Rectification — update your data on the My Profile page.
Erasure — delete your account from the Danger Zone on the My Profile page.
Portability — export all your data from the My Data page (PDF or JSON).
Complaint — you may lodge a complaint with the Danish Data Protection Agency (Datatilsynet) at datatilsynet.dk.

8. Open source

The full source code of this platform is publicly available at github.com/kenn65/GoCheaper. You can inspect exactly how your data is processed.

9. Changes to this policy

Any material changes will be announced by updating the effective date above. Continued use of the service after the date constitutes acceptance.

Questions? Email kennskjellerup@hotmail.com.