Privacy policy

GCSE.es and IGCSE.es ("we") are run by [COMPANY NAME], [ADDRESS], Spain. We are the data controller. Contact us about privacy at privacy@gcse.es.

When a school uses GCSE.es with its pupils, the school is the controller for that class data and we process it on the school's behalf under a data processing agreement.

• Account: name, email, password (stored encrypted), and whether you're a student, teacher or parent.
• Study details: qualification, exam board, year group, school, country, subjects, target and current grades.
• Work: answers, marks, test results, time spent and topics practised.
• Account visits: last login, visit start and last-seen times, and approximate time with the site visible. Protected administrators use these records to understand service usage; they are included in your data download and removed when you delete your account. We do not record browsing outside this site.
• Classes: which classes you belong to or teach.
• Age and consent: whether a student is under 14, and the parent email and permission checkbox. Parent email verification is not yet implemented.

We don't sell data, show adverts, or use outside AI services to read student answers.

• To run your account and show your progress — contract (Art. 6(1)(b) GDPR).
• To let your teachers see your work for the subject they teach — contract, or the school's public task / legitimate interest when the school sets up the class.
• For students under 14 — consent of a parent or guardian (Art. 8 GDPR and Art. 7 LOPDGDD).
• To keep the service secure and understand account usage — legitimate interest.

Your results are private. You, authorised linked parents, and teachers of classes you joined (for their subject only) can see them. Nothing is public unless you switch a share card to "Anyone with the link".

Our hosting and database providers store data for us under contract, within the EU/EEA or with approved safeguards.

We only use storage that is strictly needed to keep you signed in. We don't use tracking or advertising cookies, so we don't show a cookie banner.

While your account is open. If you delete your account, your data is deleted straight away. Automated deletion of accounts inactive for three years is not yet enabled.

You can see, correct, download or delete your data at any time from your Profile page ("Download my data" and "Delete my account"). You can also object, restrict processing, or withdraw consent by emailing us.

If you're unhappy, you can complain to the Agencia Española de Protección de Datos (aepd.es) or your local data protection authority.