Privacy policy

Who we are

SUVAT (Further Maths, Maths & Physics Revision) runs the website at suvat.org. We are the data controller for the information described here. You can contact us at fmprevision@gmail.com.

If you don't create an account

You can use the topic lists and practice questions without giving us any personal information. Your choices on My course stay in this browser until you choose Forget my choices; how you rate practice questions lasts until you close the tab. Your light or dark theme and your analytics choice are also remembered in your browser. None of this is sent to us. A free account adds lessons, worksheets, the Challenge and the Journal.

If you create an account

We store:

• your email address and first name;
• your password, as a salted, one-way hash, so nobody (including us) can read it;
• if you sign in with Google, your Google account ID, and the email address and name Google shares with us;
• your username, and when you last changed it (it can change once a day);
• what you save on SUVAT: your year, subjects, exam boards and options, the lessons you have watched and how far you got, and your confidence ratings;
• your Challenge answers: which questions you tried, how many tries, the points they scored and when you solved them;
• your profile: the picture, colours, banner and style you chose from SUVAT's set, the short line about yourself (your bio) and your pronouns, if you add them, and whether you show your first name and your course on it;
• your friends on SUVAT, friend requests you have sent or been sent, and who you follow and who follows you;
• badges SUVAT has given you (such as beta tester), and your privacy choices. Other badges are worked out from your activity rather than stored: your course (only while you show it), Challenge places and points, friends, and joining in SUVAT's first year.

We use this only to run your account and show you your own progress. The lawful basis is that it is needed to provide the service you asked for.

Your profile, at suvat.org/@ followed by your username, is public: anyone can see your username, profile picture, banner, badges, bio, pronouns, and your friend, follower and following counts. Your first name, your course (subjects, exam boards and year), your Challenge positions and your lists of friends, followers and following are hidden until you switch them on in Edit profile. Your username and points appear on the Challenge leaderboards. If you report a profile, we keep the report with the feedback; the student you report is not told who you are. Usernames and bios are checked for offensive words, and the SUVAT team can clear a bio, reset a picture or replace a username that breaks the rules. Your email address is never shown to anyone else, and your name only if you choose to show it. Choose a username that does not identify you if you would rather stay anonymous. You can download everything we hold about you, or delete your account, from Settings.

Emails

We only send emails about your account: a 6-digit code when you sign up, reset your password or change your email address; a note to your old address after it changes; and, if someone tries to sign up with an address that already has an account, a note instead of a code. We don't send marketing.

Cookies and browser storage

• fmpr_s (essential): keeps you signed in for up to 30 days. It holds a random token and nothing else. It is only set when you sign in.
• Browser storage (essential): your theme, your analytics choice, your choices on My course and, when you are signed in, a copy of your saved progress so pages load quickly.

We don't use advertising cookies or third-party tracking.

Visit counts (only if you allow them)

If you choose Allow when SUVAT asks about analytics, each page you open is counted: the page address, the date and the website that linked to it, if any. No cookie is used, and nothing that identifies you or your device is stored. We use the totals to see which pages are useful. The lawful basis is your consent, and you can withdraw it at any time from Analytics choice at the bottom of every page. Totals are kept for up to 13 months.

Feedback

If you send feedback, we store your message, what it is about, the page and lesson or question it refers to, and your email address if you choose to give one. If you are signed in, it is linked to your account, so we can see which course you are on and reply to you in Settings, under Your tickets, where you can read our replies and answer them; those replies are kept with your feedback. We use it only to fix mistakes and improve SUVAT. If you are not signed in, we can reply only if you gave an email. Feedback is deleted automatically after 24 months. The lawful basis is our legitimate interest in keeping SUVAT accurate.

Who else handles your data

• Cloudflare hosts the website and the database your account is stored in.
• Resend sends our code emails.
• Stripe takes payments for SUVAT Plus, if you choose to buy it. Stripe collects your card details, name and billing address on its own page, under its own privacy policy. SUVAT never sees your card number. We keep only which plan you have, its dates, and Stripe's reference for you.
• Google, only if you choose to sign in with Google.

They act on our instructions and may process data outside the UK under recognised safeguards. We never sell your data.

Security

Connections are encrypted. Passwords are hashed, email codes expire after 10 minutes, and repeated wrong attempts are blocked for a while.

How long we keep it

We keep your account until you delete it. Sign-in sessions end after 30 days, or when you sign out. Codes are deleted once used or expired.

Your rights

Under UK data protection law you can ask to see, correct, download or delete your data, and you can object to how it is used. You can download a copy of your data, or delete your account and everything in it, yourself in Settings: choose Delete account, type DELETE and confirm. For anything else, email us. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes, we will update the date at the top of this page.