Privacy information

What Computing Covered records and why

Computing Covered records only the information needed to provide accounts, save learning, give feedback, manage access, keep the service secure and support teachers.

Account information

This includes a name, email address, password hash, role and account status. Passwords are not stored as readable text. Students may create their own individual learner account; a parent or carer must make any purchase for a learner under 18.

To enforce the one-trial rule, the site creates a protected one-way code from a verified learner email. Common Gmail and Googlemail aliases for the same inbox produce the same code. The site does not store a second readable version of the email for this check, and does not use an IP address or browser fingerprint to decide trial eligibility. The one-way code can be kept after an account is removed so that deletion cannot reset trial eligibility; it is retained only for trial-abuse prevention and cannot be used to contact the learner.

Learning information

The platform keeps answers, code, files, attempts, hints, progress and feedback so work can be saved, improved and reviewed. Earlier attempts are kept instead of being silently replaced.

Measurement cookies

Google Analytics and Google Ads use Consent Mode for public measurement and the one-time trial or purchase conversion. Before you choose, and after a rejection, Analytics and advertising storage are denied. Google can receive limited cookieless measurements such as the public page visited, general browser/device information, timestamp and referring website. We send Analytics a page address without its query string and never send names, email addresses, learner answers or code.

If you choose Accept, Analytics and advertising-measurement cookies are enabled for up to 90 days. They help us understand repeat public-page visits and tell us when a Google advert leads to an activated trial or a PayPal-confirmed purchase. A trial event contains only a random, non-identifying event reference. A purchase event contains only the amount, currency and a non-identifying Computing Covered order reference. A Google click identifier may be kept in Google's measurement cookie, but Computing Covered does not retain it in its database. Google Analytics may also use approximate location; Google says it uses an IP address briefly for that calculation and discards it before the address is logged.

Advertising user data, personalised advertising and Google Signals remain disabled. Computing Covered stores a separate random identifier, how you found the site and which public pages you use only after acceptance. It keeps consented detailed analytics events for 13 months and anonymous daily totals for 24 months. Google data follows the separate retention settings in the Analytics and Ads properties and Google’s privacy policy.

Rejecting measurement cookies does not change access, checkout or learning. If you withdraw later, Computing Covered removes its anonymous analytics profile, denies measurement storage and clears the first-party Google measurement cookies for this site where the browser permits it. You can change your choice here at any time.

How long trial work is kept

An individual learner account is placed on a rolling two-year retention-review schedule. The review date runs from trial activation or the end of later paid access, and signing in moves it to two years after that activity. We send a warning about 30 days before the review date. Reaching the date does not currently trigger automatic deletion: records are kept until a safe deletion process can account for legal, payment and educational-record needs.

Teacher-controlled assisted feedback

For formal assessments in a teacher-managed class, an authorised teacher may enable OpenAI-assisted feedback after the platform has produced the objective mark and test results. The request can include the assessment question, the learner's submitted answer or code, the marking criteria and the automatic results. It does not include the learner's account name, username or email address, and matching learner details or email addresses in submitted text are removed before sending.

OpenAI does not decide or change the stored mark. When the teacher enables automatic feedback for an assessment, only strict-schema, high-confidence GCSE-friendly output that agrees with the stored result and has no safety flag is shown automatically. Anything uncertain remains private for teacher review. Requests use store: false; under OpenAI's standard API data controls, limited abuse-monitoring logs may still be kept for up to 30 days. Assisted feedback is not used for ordinary lesson marking or for individual learner accounts.

Purchase information

If PayPal checkout is enabled, PayPal handles individual learner payments. Computing Covered retains the account, product, original and final amount, any coupon used, currency, PayPal order/capture references, status and access dates needed to grant access, support a purchase and handle a refund. It does not receive or store payment-card details or a raw copy of PayPal account information.

Contact messages and security check

The Contact form asks for a reply email, a topic and a message. A name and payment reference are optional. Computing Covered sends the message to its protected support inbox and does not make a separate copy in the website database. The email is kept in the support mailbox only for as long as it is needed to answer the request, handle a purchase or meet a legal obligation. It is not used to add the sender to a marketing list.

Cloudflare Turnstile runs only on the Contact page as a required security service. Cloudflare receives the browser and technical signals needed to decide whether the request appears genuine, and Computing Covered sends the resulting single-use token and request IP address to Cloudflare for server-side verification. This is separate from measurement cookies and is required to send the form. Read Cloudflare's Turnstile privacy information.

Technical and security information

Security logs can include an IP address, browser information and important account actions. This helps prevent abuse, investigate errors and protect student work. Security logs are separate from public-site analytics.

Who can see it

Students see their own work. Authorised teachers see students in their classes. Administrators manage the service. Individual learner work stays private and is not sent to a school or teacher.

Services used

Trusted hosting, email, payment, assisted-feedback and form-security providers process only the information needed for their role. Student Python runs in a separate, restricted environment and cannot browse the internet or access another learner's files. If enabled, PayPal receives the information needed to process a payment. OpenAI receives minimised formal-assessment information only after a teacher enables or requests it. Google Analytics and Google Ads provide consented public-site, trial-signup and purchase-conversion measurement. Cloudflare Turnstile protects only the Contact form; no session-replay service is used.

Questions and rights

To ask about, correct or request access to personal information, use the Contact page. Identity may need to be checked before account information is disclosed or changed.

Last updated 2 October 2026.