Privacy policy
Last updated: 27 September 2026
In short: we store only what we need to run your account (email and access), your progress (so you can pick up where you left off) and anonymous aggregate stats. We don't sell your data and we don't run third-party ads. You can have everything deleted by emailing us.
1. Who runs this site?
igcsemathrevision.com is one of the Math Revision sites run by Pete Bromfield in the UK (listed in the footer); they share one sign-in system and database. Questions about your data: pbromfield@ibmathrevision.com.
2. What we store, and why
| What | Why | Where |
|---|---|---|
| Your email address | To sign you in, save progress and send emails you asked for (receipts, updates, digests). | Firebase Authentication (Google Cloud) |
| Name and avatar (Google or Microsoft sign-in) | To personalise the site. | Firebase Authentication |
| Your class, confidence ratings, practice attempts, homework uploads and scores | To show you (and your teacher, if you're in a class) your progress. | Firestore and Cloud Storage (Google Cloud) |
| Updates email (if you signed up) | To send the revision tips and news you asked for. | Firestore |
| Your plan and payment records | To unlock your plan, and because tax law requires us to keep receipts. | Stripe (card details never reach our servers) and Firestore (plan status only) |
| Your devices: a random device ID your browser makes, a label such as “Chrome on Windows” (worked out from the browser’s user-agent, which we don’t keep), when each device was first and last used, and which of our four sites it was used on | Accounts are personal and can be used on up to 5 devices; this is how we count them. You can see and remove your devices on your account page. No IP addresses or other fingerprinting. | Firestore; the device ID also sits in your browser’s local storage. A device unused for 60 days is deleted automatically. |
3. Who else sees your data
- Google Firebase: sign-in, database, file storage and cloud functions.
- Stripe: card payments for plans.
- Resend: transactional email.
- AI marking: when you ask for feedback on your working, the question and your answer are sent to an AI model provider to generate that feedback. They are not used to identify you.
- Your teacher: if you join a class, your teacher sees your progress for that class.
No advertising networks, no tracking pixels, no profiling.
4. Cookies and local storage
- Firebase sign-in storage keeps you signed in.
- Google Analytics runs only if you accept analytics cookies in the banner.
- Local storage remembers small preferences (e.g. banner dismissals). It never leaves your device.
- Device ID — a random ID in local storage that identifies this browser as one of your (up to 5) devices. It is sent to us only while you’re signed in, with each request, and is deleted from our records when you remove the device or don’t use it for 60 days.
- Where you came from — if you arrived from another site or a tagged link (e.g. a newsletter), the site name and campaign tags are kept in your browser for this visit (30 days if you accept analytics cookies), and sent to us only if you sign up for emails, so we know which newsletters and pages help.
5. How long we keep it
Account and progress data: until you ask us to delete it. Payment records: as long as UK tax rules require. Updates emails: until you unsubscribe or ask us to delete them.
6. Your rights (UK GDPR)
You can ask for a copy of your data, a correction, deletion (within 30 days) or a machine-readable export, and you can complain to the UK Information Commissioner's Office. Email pbromfield@ibmathrevision.com to use any of these rights.
7. Students under 16
Most IGCSE students are under 16. In the school pilot, student accounts are set up through the school. Parents with a question about their child's data can email us at the address above.
A parent or guardian the student links (or approves) sees their practice, topics, homework and test scores on a read-only parent dashboard and can choose a weekly summary email of the same. That email is off until the parent turns it on; the dashboard first says what it contains and how to stop it, it carries no advertising, and we record when it is turned on or off and which notice was shown. It stops from the dashboard or the one-click link in any email. The student can stop sharing with a parent at any time from their account page.