Privacy policy

Last updated 28 October 2026

Elevenate is used by parents on behalf of their children, so this page tries to be specific rather than reassuring: what we hold, who else sees it, and how to get rid of it.

Who we are

Elevenate is an 11+ practice service operated by Umut Şenoğlu, based in England. For anything on this page — including a request to see or delete your data — write to hello@elevenate.co.uk. We are the data controller for the information described below.

What we collect

Contact messages. If you use the contact form, we receive your email address and message in our email inbox so we can reply. Resend delivers the message to us; it is not saved in the account or practice database. We use temporary IP-based request counts to limit spam.
Your account. Your name and email address. If you set a password we store it hashed, never in readable form. If you sign in with Google we receive your name, email address and profile picture from Google instead. For new accounts, we also keep a random signup receipt linked to the account to prevent duplicate conversion reporting. It is only sent to Google if optional measurement is enabled and you accept it.
Your children's profiles. The name you give each child, optionally their school year, and the avatar you pick. Children do not have their own logins, email addresses or passwords — a profile exists only inside your account.
Practice activity. Which questions were served, which answers were chosen, scores, and when a session started and finished. This is what makes progress and feedback possible.
Session technical data. When you sign in we store a session record with your IP address and browser user-agent, so you can see and end sessions on devices you no longer use.
Your parent PIN, stored hashed, if you set one.
Server logs. Our web server records every request it receives — the page or address asked for, the time, the result, which site sent you, your browser, and your IP address. This happens whether or not you have an account, and we keep these logs indefinitely. They are how we see that the site is being used and how we investigate abuse. They stay on our own server and are not sent anywhere else.
What happens on the public pages. On the front page, the quick test and the sign-up page, your browser tells our server what you do there — which button you pressed, which questions came into view and which you answered, and how far you got before leaving. Unless you allow the optional product analytics described below, it is tied to a random number that lasts only until the page is reloaded: no cookie, nothing stored on your device, and no name, email address or IP address alongside it. We use it to see where the site loses people, and keep it on our own server.

We do not collect payment details — Elevenate is free while we build. We do not display adverts inside Elevenate. The public-page activity and server logs described above stay on our own server.

Optional product analytics

You can enable “Product analytics” in “Privacy preferences”, or choose “Accept all”, to help us understand return visits, which parts of Elevenate are useful, and where something goes wrong. This choice applies to this browser, including a child's subsequent practice use. It is separate from Google Ads measurement and does not affect access to the service.

After you allow it, we store a random browser identifier and a visit identifier in your browser. The browser identifier can recognise later visits in that browser; it does not prove that the same person is using a shared device. A visit ends after thirty minutes without recorded activity. Changing accounts or signing out starts a separate visit. While signed in, our server can link the optional activity to your account.

These optional records include pages used, questions coming into view, answer-selection interactions, successful or failed saving and submission, and technical error categories. They do not include names, email addresses, passwords, form contents, answer choices or recordings of your screen. Practice answers needed to provide your results remain part of the core service data described above. Engagement time counts only visible, focused use with recent interaction; time in an idle tab is not treated as active practice.

Product analytics stay on our own server and are not sent to Google or another analytics provider. Detailed optional activity records are deleted after ninety days. Return-visit reports are therefore limited to the history we still hold. Your browser identifier and choice last up to 180 days. You can reopen “Privacy preferences” on a public or parent page and decline at any time. This stops future optional collection and removes the analytics identifiers from this browser; it does not erase records already received by our server. Those records expire after ninety days, or you can contact us about deletion.

Optional advertising measurement

If an adult enables “Advertising measurement” in “Privacy preferences”, or chooses “Accept all”, we load the Google Ads tag to understand whether our adverts lead to a new, verified parent account. Before that choice, or if you disable advertising measurement or choose “Reject all”, we do not load the tag or send these measurement events to Google. Declining does not change how Elevenate works.

With your permission, Google can receive ad-click information, the public page address, technical information such as your IP address and browser, and a random signup receipt when your new account is verified. The receipt prevents us from reporting the same signup twice. We do not send names, email addresses, our internal account IDs, children's profiles, questions, answers or scores in these events. We do not enable personalised advertising, remarketing or enhanced conversions.

Advertising measurement is limited to public pages and completing a parent's signup. We do not report activity in children's practice screens. You can change your choice through “Privacy preferences” on a public or parent page. Withdrawing permission stops future measurement; it cannot recall information already sent. Google's use of information is described in its partner-site privacy information.

Why we are allowed to hold it

Account, profile and practice data are held to provide the service you asked for (performance of a contract). Session and security records are held on the basis of our legitimate interest in keeping accounts safe from other people. We do not rely on consent for this core service data, and we do not profile anyone for marketing.

Optional product analytics rely on your separate permission. Declining or withdrawing that permission does not affect the account, practice or results features you requested.

Optional Google Ads measurement relies on your separate permission. Choosing not to allow it, or changing your choice later, does not affect your account or practice.

Children

The service is bought and controlled by an adult, and a child's profile carries the minimum needed to tell one child from another and pitch questions at the right year: a name, a year group, an avatar. There is no free-text profile, no photograph, no contact detail for a child, and nothing a child enters is ever used for marketing. You can delete a child's profile at any time from the family screen, which removes their practice history with it.

Who else sees it

We do not sell data and we do not share it with other parents, schools, or any exam board. Elevenate is not affiliated with Quest or with any consortium of schools. The only third parties involved are the suppliers that run parts of the service:

Linode (Akamai), London — the server and database. All account, profile and practice data is stored here, in the United Kingdom.
Resend (EU region) — sends the emails we have to send, such as a password reset. It sees the recipient address and the message.
OpenAI (United States) — writes the feedback on a finished practice session. What we send is the paper's subject, the score, the topic counts, and the questions that were answered wrongly with the options chosen. No name, no email address and no account identifier is included, so the provider is not told whose attempt it is.
Google sign-in — only if you choose "Continue with Google". Google then knows you signed in to Elevenate, and tells us the name, email and picture on that account. You can sign in with an email and password instead.
Google Fonts — the display typeface is fetched from Google's servers when a page loads, which means Google sees the request and your IP address.
Google Ads — only after you accept optional advertising measurement, for the ad-click and verified-signup information described above. Google may process this information outside the United Kingdom.

Where it is held

Our account and practice database lives on a server in London. Email delivery happens inside the EU. The AI feedback described above goes to the United States under the transfer safeguards in that provider's data processing terms — without anything that names you or your child. Google also processes requests for its sign-in and font services, and optional advertising measurement, through its international infrastructure; see Google's privacy policy.

How long we keep it

Account, profile and practice data are kept while your account is open. Delete a child and their profile and history go with them; ask us to close your account and everything under it is deleted. Sessions expire on their own after thirty days of inactivity. Server logs are the exception and we would rather say it than bury it: they are kept indefinitely, including the IP address in them.

A random signup receipt is kept with your account to prevent duplicate conversion reporting and is deleted when your account is deleted.

Detailed optional product analytics are kept for ninety days. This limit is separate from the core practice history and server logs described above.

Your rights

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we use it. Write to hello@elevenate.co.uk and we will answer within one month. If you are unhappy with the answer you can complain to the Information Commissioner's Office (ico.org.uk), the UK regulator.

Cookies and what the browser stores

We use necessary authentication cookies to keep you signed in and complete sign-in securely. The service cannot work without them, so we do not ask for consent to set them. The app also stores small preferences in your own browser (which child is using this device, whether the parent area has been unlocked in this tab, the last drill settings). Those preferences never leave the device and are not readable by us.

If you allow optional product analytics, we also store its separate choice, random browser and visit identifiers, and an opaque local account-boundary marker so signing out or changing accounts starts a new visit. The browser and visit identifiers and account marker are removed when you decline product analytics; we remember your decline so we do not keep asking. We do not use browser fingerprinting to reconstruct an identifier after removal.

We remember your advertising-measurement choice in this browser for up to 180 days. If you accept, Google Ads can set advertising-measurement cookies to connect an ad click to a signup. Google describes these cookies and their expiry periods in its cookie information. Rejecting or withdrawing permission prevents future loading of the measurement tag.

Changes

If this policy changes, the date at the top changes with it. Where a change matters — a new supplier seeing your data, say — we will tell account holders by email rather than quietly editing the page.