Privacy notice
Most QED users are 16–18, so this notice is deliberately short and plain. The standards of the ICO Age Appropriate Design Code (the Children's Code) apply throughout.
Last updated
Who we are
QED (qedmaths.com) is a TMUA preparation tool run from the UK. Full trader details are on the terms page. For anything about your data, email info@2chams.com.
What we collect, and why
| Data | Why | Lawful basis |
|---|---|---|
| Email address | Sign-in, email confirmation, essential service messages | Contract |
| Display name (chosen by you) | Shown to you; shown on leaderboards only if you opt in | Contract |
| Exam year | Sorts leaderboards and tailors countdowns | Contract |
| Practice results (scores, per-question answers) | Your dashboard, analytics and drill suggestions | Contract |
| Group memberships | Group leaderboards you chose to join | Contract |
| Class membership and your consent to it (only if you join a teacher's class) | Lets that teacher see your results, and records that you agreed to it | Consent |
| School or college name (teacher accounts only, optional) | Shown to the teacher on their own account page | Contract |
| Payment status (via Stripe) | Unlocking the Season Pass | Contract |
| Google account details (only if you choose Google sign-in) | Signing you in without a password | Contract |
We do not ask students for their date of birth, school name, real name, or location.
If you join a teacher's class
Teachers can create a class on QED and give students a code. Entering the code shows you exactly what the teacher will be able to see before you join, and nothing is shared until you accept. From then on that teacher can see every paper, drill and clean-up you do, with the score, the date and whether you used extra time; the answer you chose on each question and how long it took; your strand breakdown; and anything they set for the class that you have not done. They cannot see your email address, your password, or whether you are on the leaderboard.
You can leave the class at any time from the Groups page, and a teacher can remove you or archive the class; any of those ends their access immediately. Your scores stay yours either way. Teacher accounts never appear on leaderboards.
If you sign in with Google
Google passes us your email address and, as part of that sign-in, your Google account name and profile picture. We use only the email address. Your Google name and picture are never shown anywhere on QED, never appear on leaderboards, and are not used for anything — leaderboards show only the separate display name you choose yourself. If you would rather we never receive them, sign up with an email address and password instead.
Google also acts as your identity provider and will know that you signed in to QED. That is between you and Google under their own privacy policy; QED sends them no information about your practice or results.
Defaults that protect you
- Leaderboard visibility is off by default. You opt in at signup or in your account page, and can turn it off again at any time.
- Leaderboards only ever show display names — never emails or real names.
- The leaderboard also carries over scores from the original TMUA Tracker, a public board run for a small group of students before QED existed. Those rows show the first name each student chose there, are marked as tracker entries, and hold nothing else. Email info@2chams.com to move one to your account or have it removed.
- Your practice data is visible only to you, enforced in the database rather than just in the interface.
- There is no advertising, no ad tracking, and no selling of data. There are no cookies beyond the strictly-necessary session cookie. Analytics, where enabled, are cookie-less and aggregate only.
Where your data lives
Supabase (hosted Postgres, London region) for accounts and results, Vercel for site hosting, Resend for sending service email, and Stripe for payments — card details never touch QED's servers. Each processes data under their own UK GDPR terms.
How long we keep it
Account data is kept while the account exists. Deleting your account deletes everything immediately. Stripe retains transaction records as required by tax law; that data is Stripe's, and nothing of it sits in QED's database beyond the payment status row.
Your rights
You have the right to access, correct, export and delete your data. You can delete your account yourself from the account page — it permanently removes your profile, attempts, answers and group memberships. For anything else, email info@2chams.com.
If you think we have handled your data badly, please tell us first so we can fix it. You can also complain to the Information Commissioner's Office at ico.org.uk.
Changes to this notice
If we change anything that materially affects you, we will say so by email before it takes effect.