Privacy Policy

Short version: Just reading this site? You don't have to give us any personal details. The only personal info we get is what you type into one of our lead forms — plus one technical identifier, a random visitor ID your browser attaches so your own submissions link together — and we never sell any of it. If you do submit a form, your browser also keeps a local copy of what you typed so we can pre-fill the next form for you; that copy stays on your device, and you can wipe it anytime (details below).

GetCDL.org is run by TecTrav LLC (“we,” “us”) out of Ohio. This page explains, in plain English, what we collect, why, who touches it, and how to get it out of our hands. No dense legalese. If anything here is unclear, email us at travis@getcdl.org and we'll give you a straight answer.

What we collect

Browsing this site doesn't require any personal details. We don't make you log in, and we don't track you around the web. You can read every page, run the cost calculator, check your CDL eligibility, and take every practice test without ever telling us who you are. Every tool shows its result for free; we only ask for your contact details if you choose to be matched with a school or notified about your state, and checking the consent box is only ever needed for that optional contact. Like any website, our hosting provider automatically handles basic technical data — your IP address and standard server logs — to keep the site secure and running; we don't use that to identify you or build a profile.

Beyond that automatically-handled technical data, the only personal information we get is what you choose to type into one of our lead forms. Those forms appear in a few places: the CDL Cost Calculator, the CDL eligibility checker, the practice tests (including the Ohio practice test), and the inquiry form on our page for CDL school partners. Whichever form it is, a submission can include:

• Your name (optional)
• Your email address (required — it's how we follow up)
• Your phone number (optional — only the matching and partner forms have a phone field, and on the matching forms a number is only accepted together with the consent box described below)
• Your ZIP code (optional)
• On the CDL-school partner inquiry form only: your school or company name (required there), your website (optional), and a message (optional)
• An “interest” tag, like which state or tool you were looking at
• Which page the form came from
• Which box you checked and when — either the matching consent (calls and texts) or, on a “notify me” form, the email notification opt-in. They're recorded as different things, because they are (more on both below)
• A timestamp
• And one thing you don't type: a random visitor ID your own browser generated — a technical identifier sent with the submission so that if you use more than one of our tools we can tell it's still you (see “What stays in your browser” below)

That's the whole list. We don't ask for your Social Security number, your date of birth, your driver's license, or anything a CDL school doesn't actually need to point you in the right direction.

How we use it

We use what you give us for one job: helping you get your CDL. Specifically, that means we may:

• Follow up with you about the tool you used or the question you had
• Send a notification to our own team so a real person knows you reached out
• Match you with CDL schools or carriers in your area — but only if you gave us permission to (see the next section)

We're not building an ad profile on you. We're a small site trying to get the next driver pointed at honest information.

Who we share it with

We do not sell your personal information. Full stop.

A short list of companies help us run the site, and they only ever see what they need to do their job:

• Supabase hosts the database where your form submission is stored. They're our data host and processor.
• Resend is the email service that delivers the notification to our team inbox when you submit a form.
• PostHog is our analytics service (details in “Cookies and analytics” below). It sees usage events, never the contents of what you type.
• Vercel Analytics counts traffic for us. It uses no cookies and cannot follow you to other websites, and it never sees the contents of what you type.
• Sentry is our error-monitoring service. If a page crashes, an error report with the technical details of what broke — never your name, email, or form contents — may be sent there so we can fix it.

The only time your contact details go to anyone outside that list is when you give us your consent to be matched with CDL schools and carriers. If you do, we may share your name, email, phone, ZIP, and interest with those partners so they can reach out about training. That sharing only happens with your consent, and it's the entire point of that consent box.

About that consent box

On the matching forms, there's a checkbox that reads:

I agree that GetCDL.org (TecTrav LLC) and the CDL schools and carriers it matches me with may call and text me about CDL training at the phone number I entered above, including with an autodialer or an artificial/prerecorded voice. I don't have to check this box to use anything on this site — consent is not a condition of any purchase.

On the CDL eligibility and practice test matching forms, checking that box is required to submit, and we enforce it on our server — not just in your browser. The box is never pre-checked, including when we pre-fill a form you've used before: consent is a fresh decision every time. When you check it, we keep a record of that consent: the value you submitted and the timestamp. That's so we both have a clear record of what you agreed to and when.

Phone numbers and that consent travel together, and we enforce it in both directions: a matching form won't take a phone number unless the box is checked, and checking the box means giving a number the consent applies to. We don't keep a phone number we don't have permission to use.

Our “notify me” forms — the ones that offer a heads-up when your state's verified numbers go live — are different on purpose. They take your email only (no phone field), and their checkbox is a notification opt-in, not the consent above: it authorizes exactly one thing, an email when the thing you asked about is live. A notification opt-in is never recorded as consent to be called or texted, and it never puts you on a school-matching list.

If you didn't check the matching-form consent box, we don't hand your details to schools or carriers. Simple as that.

What stays in your browser

When you submit one of our forms, your browser generates and stores a random visitor ID in its local storage (a small key named getcdl.visitor.v1) — that happens on the submit itself, even if the submission fails. After your first successful submission, the same key also keeps what you submitted — your name, email, ZIP, and phone, with a timestamp. This is a first-party browser copy on your device — the submitted record itself is also saved server-side, as described under “How we store it” below — and we never send this browser copy to analytics. It exists for exactly one reason: the next time you open one of our forms, we pre-fill it and say “we already have your info” instead of making you type everything again.

The random visitor ID travels with each form you submit, so if you use two of our tools we can connect those submissions to one record instead of treating you as two different people. It's a random number our code made up in your browser — it isn't derived from your device, and it doesn't track you anywhere else.

You're in control of it: the “Not you? Start fresh” link on any pre-filled form erases the whole thing, and clearing your browser's site data does too. It never expires on its own, but it also never leaves your machine except inside a form you chose to submit.

One more thing that lives in your browser: the skills-test inspection checklist saves which items you've checked off (key getcdl-inspection-checklist-v1) so your progress survives a reload. That's all it is — checkbox state, on your device, never sent to us.

Cookies and analytics

We keep this minimal, and we're not going to claim things we don't do.

We do not run advertising cookies or cross-site tracking. We don't have third-party ad pixels following you around. Our fonts are hosted on our own server, so loading a page doesn't quietly ping someone else for them.

We use two analytics services. PostHog helps us understand which pages and tools people actually use — page views, button and link clicks, which calculator got run, whether a form got submitted, and page-performance timings. It stores a random identifier in your browser's local storage to count you once instead of dozens of times. We've set it up so the contents of what you type — your name, email, phone, ZIP — are never sent to analytics; it sees that a form was submitted, not what was in it. Like any service your browser talks to, PostHog's servers technically receive your IP address with each event — we don't use it to identify you. Session recording is switched off in our code, and there's no cross-site anything.

The second is Vercel Analytics, run by the company that hosts this site. With each page view it records the page address and any query string on it, the page you arrived from, your approximate location (country, region, city), and your device type, operating system, and browser — plus a timestamp. It uses no cookies and stores nothing in your browser. To avoid counting the same person twice it derives a temporary identifier from your request rather than storing one on your device, and per Vercel's own documentation that is discarded after 24 hours. It cannot follow you to other websites, and it does not build a long-term profile of you.

Our hosting provider may set a small number of strictly-necessary cookies to keep the site secure and running. That's the kind of thing every site needs to function — not tracking.

How we store it and protect it

When you submit a form, the info goes into a Postgres database hosted by Supabase. That database has Row-Level Security turned on with no public access policies — meaning the data isn't open to the world. Only our own server, using a private service key, can read or write it. The save to our database happens server-side through our own /api/leads route — your browser can't write to the database directly. (The separate local copy described in “What stays in your browser” lives on your device only.)

We take reasonable, good-faith steps to keep your information safe, and we keep it only as long as we need it to help you get your CDL. No system is bulletproof, and we're a small educational site, not a bank — so we're not going to promise you military-grade anything. We'll just be honest and careful with the little we collect.

Your choices

It's your information. You can:

• Ask us what we have on file for you
• Ask us to correct it
• Ask us to delete it
• Tell us to stop contacting you, or opt out of being matched with schools and carriers

To do any of that, email travis@getcdl.org and tell us what you want. We'll take care of it.

Age requirement

This site is for adults. You must be 18 or older to use our forms or submit any information. We don't knowingly collect anything from anyone under 18. If you believe a minor sent us information, email travis@getcdl.org and we'll delete it.

Changes to this policy

If we change how we handle your information, we'll update this page and change the “Last updated” date at the top. If the change is a big one, we'll do our best to make it obvious.

Contact us

Questions about your privacy, your data, or anything on this page? Email travis@getcdl.org. A real person will read it.