Cookie and data policy

Warm Bee Computing is an independently hosted revision site. You can read the notes and try the quizzes and practice papers as a guest. An account lets you save your work and resume it on another device.

Who is responsible for your data

Jonathan Wharmby, operating as Warm Bee Computing, is the data controller for this site. This means Warm Bee Computing decides what personal data the site uses and why. Cloudflare processes data for Warm Bee Computing when it hosts the site and database and delivers site emails.

What we collect and why

Account details: Students enter their first and last names and email address. Teachers enter their email address and can choose a display name. The email is your sign-in identifier and can be used for account recovery where available. Names identify the right person in the dashboard and class list. The site creates an internal account ID to link your account to your saved work.
Class and invitations: The site records your role, class, signup time and which invitation was used. It stores a hash of the invite code, when the invite expires and whether it has been used or withdrawn. These records assign the correct class, restrict teacher access and enforce limits on invite use. When a student signs up, the site can email the class teacher the class name and a dashboard link.
Passwords, sessions and recovery: The site checks your password when you sign in and stores a salted password verifier. A verifier is a cryptographic value used to check your password without keeping a readable copy in the database. The site stores hashed session tokens and their expiry to keep you signed in securely. If a reset is issued, it stores a hash of the code and its expiry so the code can be used once. Teacher-issued reset codes expire after 24 hours. Automated recovery emails are currently unavailable.
Revision work and practice results: Signed-in students can save topics marked as revised, theory check and quiz answers, scores, exam drafts, practice timers and recorded attempts. The site records when progress is updated and uses version numbers to help prevent a save from overwriting newer work from another device. Teachers see progress summaries for their classes. Automatic feedback helps you practise and the resulting marks are for revision.
Revision analytics · optional: If you allow analytics and sign in as a student, the site records when you revise, your active time and which dashboard, theory topic, quiz or exam paper you open. Your teacher uses this information to see which resources the class is using and where students may need support. The timer pauses when you leave the tab or after five minutes without interaction. It uses interactions such as clicks or key presses to tell whether you are active. It does not record which keys you press in the analytics log.
Teacher timetable uploads: If a teacher uploads a timetable, the site stores the class codes, rooms, scheduled periods, week pattern and closure dates to show the timetable and link the teacher to the class they monitor.
Connection and security information: Cloudflare handles connection information such as your IP address to serve the site. The site uses the IP address to limit repeated attempts to unlock the preview, sign up or sign in and to protect against abuse. The revision analytics records use account IDs, times and revision sections.

Cookies and browser storage

Use Cookie settings to change either optional choice. Turning analytics off stops new recording and clears unsent activity from this browser. Sign-in and progress saves remain available. Contact Warm Bee Computing about activity that has already been saved. External sites you open from a link have their own policies.

Who can see your data and how it is protected

Teachers can see student names and progress summaries for their own classes. They can also see the revision activity students choose to share. Student accounts can open their own saved answers and drafts. Authorised site administrators can access records to operate the service and respond to data requests.

Cloudflare D1 protects stored database records with AES-256 encryption at rest. This means the database is encrypted while it is stored. Transport Layer Security (TLS) protects data in transit, including when your browser connects over HTTPS and when the website’s server code communicates with D1. Cloudflare D1 security

Cloudflare’s published Data Processing Addendum describes its role as a processor and the safeguards it provides for international transfers, including Standard Contractual Clauses and the UK Addendum where applicable. Cloudflare Data Processing Addendum

Why we use your data and how long we keep it

Optional analytics and remembered settings use your consent. You can withdraw it at any time in Cookie settings. The lawful basis for account and progress records and the server retention periods for those records and analytics are pending review. The cookie and reset-code expiry times above describe how long they work on the site.

Contact, rights and complaints

For questions, requests to access, correct or delete your data, or requests to restrict or object to its use, contact Warm Bee Computing at privacy@warmbeecomputing.co.uk. Cloudflare forwards privacy emails to a mailbox hosted by Microsoft. We use the address and information you send to handle your request. You can also complain to the Information Commissioner’s Office (ICO).