Privacy policy

Who we are

FMPR (Further Maths, Maths & Physics Revision) runs the website at fmpr.uk. We are the data controller for the information described here. You can contact us at fmprevision@gmail.com .

If you don't create an account

You can use the topic lists and practice questions without giving us any personal information. Your course choices are kept in your browser for that visit only, and are gone when you close the tab. Your light or dark theme and your cookie choice are remembered in your browser so they apply next time. None of this is sent to us. Lessons and the Journal need an account.

If you create an account

We store:

• your email address and first name;
• your password, as a salted, one-way hash, so nobody (including us) can read it;
• if you sign in with Google, your Google account ID, and the email address and name Google shares with us;
• what you save on FMPR: your year, subjects, exam boards and options, the lessons you have watched and how far you got, and your confidence ratings.

We use this only to run your account and show you your own progress. The lawful basis is that it is needed to provide the service you asked for.

Emails

When you sign up or reset your password, we email you a six-digit code. These are the only emails we send. We don't send marketing.

Cookies and browser storage

• fmpr_s (essential): keeps you signed in for up to 30 days. It holds a random token and nothing else. It is only set when you sign in.
• Browser storage (essential): your theme, your cookie choice and, when you are signed in, a copy of your saved progress so pages load quickly.

We don't use advertising cookies or third-party tracking.

Visit counts (only if you allow them)

If you choose Allow on the cookie banner, each page you open is counted: the page address, the date and the website that linked to it, if any. No cookie is used, and nothing that identifies you or your device is stored. We use the totals to see which pages are useful. The lawful basis is your consent, and you can withdraw it at any time from Cookie settings at the bottom of every page. Totals are kept for up to 24 months.

Feedback

If you send feedback, we store your message, what it is about, the page and lesson or question it refers to, and your email address if you choose to give one. If you are signed in, it is linked to your account so we can see which course you are on. We use it only to fix mistakes and improve FMPR, and reply only if you gave an email. Feedback is deleted automatically after 24 months. The lawful basis is our legitimate interest in keeping FMPR accurate.

Who else handles your data

• Cloudflare hosts the website and the database your account is stored in.
• Resend sends our code emails.
• Google, only if you choose to sign in with Google.

They act on our instructions and may process data outside the UK under recognised safeguards. We never sell your data.

Security

Connections are encrypted. Passwords are hashed, sign-in codes expire after 10 minutes, and repeated wrong attempts are blocked for a while.

How long we keep it

We keep your account until you delete it. Sign-in sessions end after 30 days, or when you sign out. Codes are deleted once used or expired.

Your rights

Under UK data protection law you can ask to see, correct, download or delete your data, and you can object to how it is used. You can download a copy of your data, or delete your account and everything in it, yourself on the account page. For anything else, email us. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes, we will update the date at the top of this page.