You can read the whole public record without an account. This notice says who is responsible, who serves the site, what is counted and what stays in your browser.
Who is responsible
The Schools Record is published by Andre Kaljevic, the data controller for the personal information described here.
How to contact us
For a privacy question, or to ask what we hold about you, to correct it or to delete it, write to hello@theschoolsrecord.co.uk. We reply within 10 working days. If you are not happy with our reply, you can complain to the Information Commissioner’s Office.
Who serves the site
This site, theschoolsrecord.co.uk, is served by Cloudflare. To deliver each page and protect the site from attack, Cloudflare handles the technical details that every web request carries, such as your IP address, the page asked for, your browser type and the time. It does this on our behalf, under its data-protection terms with us. We do not use these details to identify or follow anyone.
What we count
We carry no advertising, and the only counting of visits to this site is Cloudflare’s, described here. Cloudflare keeps running totals for every site it serves and shows them to us: the number of requests, an estimate of the number of visitors, the amount of data sent, the countries requests came from and how many requests failed. These totals do not identify anyone, and they need no cookie.
We also use Cloudflare Web Analytics, which counts page views and measures how quickly pages load. Cloudflare adds its small script to every page of this site. When a page has loaded, and again as you leave it, the script sends Cloudflare a short report through this site’s own address: the page’s address, the site that sent you there if there was one, measurements of how the page loaded, and your browser, operating system and type of device. Cloudflare notes the country your connection comes from. It counts a visit as a page view that came from another site or from a direct link, so nobody has to be recognised to be counted. It does this on our behalf, under its data-protection terms with us.
Cloudflare does not record the part of a page address after a question mark, which on this site can hold your shortlist and a research question. It says the script sets no cookie and uses no other storage in your browser, and that it does not follow anyone over time by IP address, browser details or any other fingerprint. It keeps each report in full for seven days, after which it keeps about one in ten, and shows us the last six months. Cloudflare describes the service in its Web Analytics questions and answers and its announcement of the service. Many content blockers stop the script, and the site works the same without it.
We have switched on no other counting. If that changes, this section will say exactly what is counted before counting starts.
Cookies and your browser’s storage
We use strictly necessary cookies for reader accounts and research purchases, described below. Cloudflare may set a strictly necessary security cookie when it has to tell people from automated traffic, for example if it challenges a browser during an attack.
A few conveniences use your browser’s own storage. The stored settings and identifiers stay on your device and are removed when you clear this site’s data in your browser. School-choice identifiers are also sent to the research access service when the page checks coverage or retrieves research, and retained there when you choose Save, as described below:
- Your theme, light or dark, kept until you change it.
- Whether you are logged in: a marker kept while this browser is logged in to a reader account, so the site can show My account instead of Log in. It holds no account details and is removed when you log out.
- Your shortlist: the schools, measure and years you are comparing, and any research question you add, kept so that they follow you from page to page until you clear them. They also appear in the page address, so a link you share carries them: do not put personal details in a research question.
- Your school-choice selection: public school, entry-year, subject and briefing identifiers, kept to reopen your choice. The page sends these identifiers to the research access service to check coverage or retrieve the available research. Choosing Save also retains them in the service. This selection stores no child details or protected authored research in browser storage.
- Returning to your enquiry after checkout: the public school, entry-year, subject and briefing identifiers associated with up to 20 recent orders, retained in this browser for up to 180 days to return you to the enquiry you brought to checkout. It contains no private investigation notes. Clearing browser storage removes the details used to reopen that enquiry.
- Your briefing list: the studies in the research edition you choose for a briefing, kept until you remove them or clear the list.
- Saved comparisons and briefs, kept only if you save one. They are not an account, are not copied to other devices and are not backed up by us.
- Your place: where you were reading, kept until you close the tab.
If you create a reader account
An account is optional for reading the public site. It lets you return to purchases you link to it from another device. We keep your email address, a salted password hash (never your readable password), confirmation date, account sessions and the references of linked purchases in the research service, hosted by Render. We use these records to provide your account and access, and to protect them from misuse. Creating an account does not buy a licence or subscribe you to marketing.
Confirmation and password-reset messages are sent only when requested. New accounts and password resets are unavailable while outbound account email is not configured; the account page says when this is the case. Confirmation links expire after 24 hours and reset links after 30 minutes. Each works once. The service stores a hash of each link token, not the token itself. Passwords and tokens are not included in analytics or public research pages.
A necessary account cookie keeps you logged in for up to 30 days. It is restricted to the research service and cannot be read by page scripts. Logging out ends that account session and removes this browser’s research cookies. Changing or resetting a password ends the account’s other sessions. Earlier guest access and separately saved recovery codes remain usable until revoked; a password change does not cancel those separate ways back to your research or change a paid licence’s end date.
We limit account requests per network address and per hashed email identifier, within fixed time windows. Security records contain account references and actions, without passwords or email-link tokens. Account records and purchase associations remain in the service until removed; you can request access, correction or deletion by writing to the address above. Financial records that must be retained are handled separately under the purchase section below.
If you write to us, or use a form on this site
Corrections, questions and statements from schools reach us by email. You can write one in your own email program, or use one of the forms on this site: the correction report, which a school also uses for its right of reply, and “Tell me when research access opens”. A form sends what you type straight to the editor’s inbox through Cloudflare, which serves this site. The site keeps no copy of it, sets no cookie and never puts what you type in a page address. To stop floods of messages, it counts how many forms each network address sends in a minute, and then forgets the count.
We use what you send only for the reason you sent it. For a correction or a school’s reply, that is to answer you and, if a figure was wrong, to keep the public corrections record, which describes the figure but never names the person who reported it; we do this because keeping the record accurate is our legitimate interest. If you ask to be told when research access opens, we use your address for that one email, with your consent, which you can withdraw at any time by writing to us. Andre Kaljevic is the data controller for what the forms send.
How long we keep it: a correction report or a school’s reply until we have dealt with it, and no longer than 12 months after it arrives unless the matter is still open; a request to hear when research access opens until we have sent that email, and no longer than 12 months. Every message a form sends tells the editor the date by which it must be deleted. Email you send us yourself is kept on the same terms, and you can ask for yours to be deleted sooner.
Your rights
You can ask for a copy of the personal information we hold about you, and ask us to correct it, delete it or stop using it. Write to the address above; we will not charge for this.
The earlier address
The record was first published at the-schools-record.streamlit.app, on Streamlit’s hosting service; Streamlit is part of Snowflake. That address no longer shows the record: it sends readers on to the same page on theschoolsrecord.co.uk, or shows a short page saying the record has moved, with a link. That page is shown inside Streamlit’s own hosting page, which Streamlit controls and The Schools Record does not. The hosting page loads third-party analytics scripts and may collect usage, device and connection information. Streamlit’s privacy policy applies to it, and refers to the Snowflake Privacy Notice.
The sources we link to
We publish links to public documents only. Private file locations, access credentials and unpublished research material are never published. A link to a document is not the same as a check: each record says separately whether its figure was checked against the original for that year.
If you buy research access
Research access is open. This section says what happens when you buy it.
Who processes your payment. Payments are taken by Stripe on its own payment page; your card details go to Stripe, never to this site. We use Stripe for payments and related business services. Stripe collects identifying information about the devices that connect to its services and uses it to run and improve those services, including to detect fraud. See Stripe’s privacy policy.
What Stripe collects. Your email address (for your receipt), your payment details, your billing country and postcode, and information about your device and connection, which it uses to prevent fraud. Stripe also keeps a customer record in our Stripe account with your name, email address and billing details, which it uses to send your receipt and your invoice.
What we keep. For each order: the licence, its price and terms version, the studies you chose (their public ids), when it was paid and when it ends, and Stripe’s reference numbers for the payment. For tax evidence: your billing country and postcode and your card’s issuing country, and a business tax id if you give one. The payment record does not copy your name, email address, street address or card details from Stripe. A reader account separately holds the email address you provide, as described above. Stripe’s notifications about your payment are kept with those details removed.
Research and private notes you save. When you deliberately save a selection through the research access service, it keeps the public school, record and study identifiers and, for school-choice research, the public briefing identifier, selected entry year and subject identifiers, with the research version and date, linked to this browser's access. It keeps a dated copy of any note you issue, including its sources, definitions, permitted use and a checksum used to check that the file is unchanged. It also keeps correction notices for affected saved research. These service records are separate from the older comparisons saved only on your device. Public research selections and issued notes contain public identifiers and published research. An optional private investigation holds the decision notes, selected questions, response status and observations that you deliberately save. Professional case labels and working notes are also private. Do not include child names, health information or confidential client details. These private fields stay out of issued research notes, client-share links, public URLs, analytics and partner feeds. A reused selection starts with blank private fields. Deleting a saved selection clears its private working fields; restoring that selection does not restore the cleared text. You can export a separate private investigation file. They stay in the service until the owner removes them; you can ask for deletion using the address above. Downloaded copies stay on your device until you remove them.
Why. To provide the licence you bought (the contract), to keep the accounting and tax records the law requires (a legal obligation), and to prevent fraud (our legitimate interest).
How long. Payment records (Stripe’s references, the billing country and postcode, the card’s issuing country and Stripe’s notifications) are kept for 6 years from the end of the UK tax year of the sale (5 April), as tax law requires, and then deleted automatically. The order itself (the licence, its dates and the studies chosen) is kept as the record of the licence. If you link it to a reader account, that association identifies it as your purchase.
Cookies research access uses. Research access keeps your licence in two cookies that no script can read: one while a payment is being confirmed (up to 30 days) and one for the licence itself (until it ends, or longer to retrieve an issued note as described below). They are strictly necessary for the service you asked for, carry no personal details, are sent only to the research access addresses on this site, and are never used to follow you. Stripe’s payment page sets its own cookies on Stripe’s site.
Retaining an issued note. Issuing a note allows this browser's necessary research cookie to remain for 180 days so you can retrieve the note after the paid term. It does not extend the paid licence or allow new protected research after it ends. Your downloaded HTML and JSON copies stay readable without that cookie. Clearing the cookie removes this browser's route back to its private saved research; keep a downloaded copy of any note you need to retain.
Last reviewed .
About · Terms · Accessibility