Privacy Policy

Effective Date: 30/09/2026

JZMaths is operated by Joe Zhou, who is responsible for the personal information described in this policy. You can contact me at jzmaths@hotmail.com. This policy explains what JZMaths collects when you use the site, why it is used, and what happens if you anonymise your account.

Information collected

• Account and access information: your email address, first and last name, authentication details and the access attached to your account. If you request free access, I may also receive the school and teacher details you provide to verify eligibility.

• Exam and progress information: papers and questions attempted, selected answers, scores, timings, flags, mastery estimates and other information needed to save and display your progress, analyse question difficulty and calibrate results.

• Messages and support: messages sent to your JZMaths inbox, whether they have been read, and information you include when you email me or ask for support.

• Technical information: essential sign-in and paper-progress storage, and technical server logs that may contain an IP address. Limited sign-in diagnostics record request duration, success or error type, page, browser family and site version, without your account identifiers or a sign-in token.

• Payments: if you purchase a bundle or live mock, Stripe handles your card details. JZMaths receives the payment reference, amount, currency, time and refund status needed to provide access and resolve payment issues. JZMaths does not receive your card number.

• First-party usage analytics: page viewed (without query-string parameters), the time of the view and an estimate of how long the page was in active use (counted only while the page is visible, and stopped after a period without scrolling, clicking or typing), referring website, approximate country, device type, operating system and browser family. For resource downloads, we record the file, time and approximate country. The approximate country is derived from the IP address; the analytics record does not contain the IP address. The site uses a short-lived daily visitor code for approximate visit and download counts; it is not stored on your device. These records are not joined to your account or used for advertising.

Why information is used

I use account and exam information to provide the simulator, save papers in progress, show results and progress, administer purchases and respond to you. The usual UK GDPR basis is performance of the service you request. Where information is necessary for legal or accounting duties, the basis is legal obligation.

I also use performance observations to assess questions, improve scoring and calibration, find errors and improve the papers. I use limited technical information to keep the service secure and working, and aggregate site and download statistics to understand and improve the site. For these purposes I rely on legitimate interests in operating and improving JZMaths, with particular care because some users are under 18. Where a separate consent is required for a device identifier, I will ask for it.

I may send service messages, including password resets and important account or exam notices. I may also occasionally email about JZMaths features and resources where you have agreed or the law otherwise permits. These emails include an unsubscribe link. Unsubscribing does not stop essential service messages. I do not sell personal information or use it for advertising or cross-site tracking.

Site analytics and your choice

JZMaths runs its own usage analytics to produce statistics such as page visits, estimated time actively spent on pages, how visitors reached the site, device categories and popular downloads. The information is used to improve JZMaths, not to follow an individual around the site, build a marketing profile or make decisions about a particular visitor. Individual analytics events are kept only as long as needed to produce aggregate statistics; statistics that cannot identify a person may be retained for longer.

You can object to statistical site analytics through the site’s Privacy Preferences control, without paying or losing access to the service. If you object, JZMaths stops optional analytics storage and access on your device. Any analytics use that falls outside the statistical-purpose exception, such as a persistent identifier used to follow an individual, would require your consent before it is set; the site currently sets none. Essential security and service logs may still be processed.

Anonymising your account and deleting personal records

You can choose Anonymise account in Account Settings. This closes your account, removes your sign-in and permanently removes the link between you and your account’s exam and progress records in the active service. Your name, email address, account identifier and other information that could connect the retained performance observations to you are removed. The action cannot be undone: neither you nor I can restore the account or reconnect genuinely anonymised performance observations to you.

JZMaths may retain anonymous observations from your answers, scores, timings and paper attempts to calculate question statistics, calibrate scores and improve the papers. Those observations must not identify you, alone or in combination with information reasonably available to JZMaths. They may be kept for as long as they remain useful for these purposes. Once genuinely anonymised, I cannot find which observations were yours to remove them later.

If you want your identifiable performance records erased instead of converted into anonymous observations, email jzmaths@hotmail.com before using Anonymise account. I will honour that request for the records that can still be linked to you, subject to any information I must keep for legal reasons. Statistics already genuinely anonymised or aggregated cannot later be traced back to you and removed selectively.

Account information is removed from active systems within 30 days of the account action or a completed erasure request. Protected backups may contain earlier copies for up to 90 days until they are overwritten; they are used only for recovery, and any restoration must reapply the deletion. A payment provider may keep its own transaction records under its legal obligations. An email you sent me, a provider’s security log, or information I must retain for a legal obligation may also remain for a limited period. I will explain any applicable exception if you contact me about your records.

How long information is kept

Your identifiable exam history is kept while your account remains open so you can review attempts and track progress. I review the need for dormant accounts and will not keep identifiable information longer than needed for the purposes above. Anonymous paper sessions started without an account are deleted after 90 days of inactivity. Inbox messages are removed with your account. Support correspondence and technical logs are kept only for as long as needed to resolve the issue, protect the service or meet a legal duty. The account and backup periods following anonymisation are set out above.

Cookies and similar technologies

The site uses essential authentication cookies and local storage to keep you signed in and preserve a paper in progress. Site and download analytics use a session-storage visit marker, jz_an_visit, which is cleared when the tab closes, and a daily rotating code for approximate visit and download counts; no analytics cookie is set. These analytics technologies are separate from your account and are not shared with advertisers. Your Privacy Preferences control lets you object to statistical analytics; your choice is kept in a single first-party preference cookie, jz_analytics. Blocking all cookies in your browser may stop sign-in or paper-resume features from working.

Service providers and international processing

Supabase provides database hosting and sign-in; Vercel provides website hosting and content delivery; Resend delivers email; Stripe processes payments; and Namecheap provides domain services. They receive only the information needed for their roles. Account and exam records are stored with Supabase in the European Union. Technical requests, emails or payments may be processed outside the UK or EU by providers involved in delivering those services. Where a restricted transfer of personal information occurs, I use an applicable adequacy arrangement or appropriate contractual safeguards; you can ask me for details at the contact address above. Stripe also has its own privacy responsibilities for payment information it receives.

Your rights

You can ask to see your personal information, correct it, request erasure or restriction, object to processing based on legitimate interests, and, where applicable, receive a portable copy. You may withdraw any consent you have given. These rights depend on the circumstances and are not absolute. Contact jzmaths@hotmail.com; I will normally respond within one month. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

Children and security

JZMaths is intended for users aged 13 and over. If you are under 18, this policy is intended to help you understand how your information is used; you may contact me about it directly. I use encrypted connections and appropriate technical and organisational safeguards to protect personal information.

Changes to this policy

I may update this policy as the service changes. I will signpost material changes on the site and update the effective date. For questions about this policy, email jzmaths@hotmail.com.