Data safety
What this site collects, why, where it goes, how long it stays, and what you can do about it. Anything you cannot do yet is marked.
This is a site about children who are already badly served by systems holding information about them. It holds as little as it can, and this page sets out exactly what that is.
The short version
Your child is never named
No check on this site asks for a name, a date of birth or a school.
Nothing leaves this site
In this build, nothing you enter leaves this site. It does not contact a school, a council or any other organisation, and it carries no analytics, no advertising and no tracking.
Your answers are not kept in this browser
It holds a session id and how far through you are. Your answers sit on the server for half an hour and then stop being available. Only a handover link you make carries the finding on, for ten minutes.
Nothing is in the web address
No answer and no finding ever appears in a URL, a page title, or a link you might share by accident.
What is collected, and why
The detail3 items
Your answers to check questions
Chosen from a fixed list, never typed. They are what the finding is worked out from, and they are held against a session id on the server.
A session id
A random id with no meaning in it. It is the only thing that travels between your browser and the server, and it is all this browser stores.
What you write in a report
If you report something wrong, what you write is held with the id of the page it came from. It is never shown back on the site, and it stays in this build’s queue until the moderation process that reads it arrives with the product.
How AI is used here, and how little it needs
The free check does not call a language model at all. It walks a set list of questions and matches your answers against rules written by hand, which is why it needs so little: no name, no documents, no history. The letter checker reads pasted text the same way, scanning it for dates, promises and facts. In this build, nothing you enter leaves this site.
What you can do
Some of these you can do right now. The rest are marked, so you can see exactly what is and is not possible today.
Close the tab
Whatever this browser was holding goes with it. Nothing here survives the tab.
Clear it yourself
Clearing site data for this website removes the session id and the check you were partway through. There is nothing else stored here to remove.
Correct something that is wrong
If a finding, a date or a source is wrong, report it against the page it came from.
Ask what is held about youComing soon
There is no route for asking yet. Here is the answer meanwhile: a public check keeps only your answers against a random id for half an hour, so there is usually nothing left to send you. The asking route arrives with the contact routes.
Export or delete everythingComing soon
Export and deletion are account controls, and there are no accounts yet. They arrive with the account, not before it.
Disconnect another serviceComing soon
Nothing on this site is connected to another service, so there is nothing to disconnect today. If that changes, the control changes with it.
Information about children
Nothing on this site asks for information about your child. The check asks what is happening — a refusal, a missed date, support that is not arriving — and never who it is happening to. A letter you paste may contain a name; that text is read for the length of the request and is not stored. Removing names before you paste costs you nothing here.
How long anything is kept
The detail4 items
A check session: half an hour
After that it stops answering and its answers are dropped. It holds the name of the check and your chosen answers, and nothing else. A handover link made near the end is the one thing that reaches past the half-hour, and only for its own ten minutes. So nothing here outlives forty minutes.
A handover link: ten minutes
The link that carries a finding towards account creation stops working after ten minutes.
In this browser: until the tab closes
The session id and your place in the check are kept in tab storage, which the browser throws away with the tab.
A report: until the service restarts
There is no automatic deletion for reports yet, and none is written to a database. In this build they are held in the memory of the running service, so a restart is what clears them. A retention rule arrives with the moderation process that reads them.
How it is kept safe
The detail
There is no database and there are no accounts yet, so there is very little held anywhere. Check sessions live in the memory of the running service and are gone when it restarts. Nothing is shared with an analytics service, an advertising network or any other company. When accounts and stored evidence arrive, a security review arrives with them, and this page is rewritten first.
If something goes wrong with your information
Today: tell us through the report form
There is no security address and no direct contact route yet. What does work is the report form. What you write in one is held with the page it came from, until the process that reads it arrives with the product. A problem with information is worth sending even if you are not sure it is one.
A formal incident processComing soon
Written procedures, a notification timetable and a named contact arrive with the security review that comes when accounts and stored evidence do. You will read about them here when they do.
Asking a question, or telling us something is wrong
One of these takes what you write. The other two are routes to choose between, and each says what state it is in when you get there.
- Report something wrong on a pageFor a finding, a date or a source that looks incorrect. This is the form that sends.
- Ask about your informationFor a question about what is held, or a request to correct or remove it. The contact routes are still being set up, so that page says so rather than showing a form.
- Support centreFor anything else, including accessibility and safeguarding routes.
The formal documents
The privacy policy, terms and cookie policy are not finished. They stay placeholders until the data practice is settled and a qualified reviewer has been through them. Draft legal wording published as though it were final would be worth less to you than this page.
If you want to see it for yourself
The check is free, it does not ask for a name, and you can stop at any point. That is the whole of what you would be taking on.