Privacy
Last updated 4 September 2026
Ticked is a free, static worksheet site. It has no accounts and sets no cookies. The worksheet tool stores nothing you type; the one thing the site can hold is an email address, and only if you ask for the weekly sheet. This page explains the little data that does get processed, and why.
Who is responsible
The data controller for this site is Enrico Pelizzon. For any question about this policy, or to exercise the rights below: email hello@tickedpractice.co.uk.
Worksheets never leave your browser
Every worksheet is generated on your own device, by code running in the page. The problems, the answers and the PDF are built in your browser and are never uploaded — there is nothing for us to keep, and no way for us to reconstruct a sheet you made.
We do count that a sheet was made, printed or downloaded, along with the page it happened on, which worksheet type it was, and the options you had set — how many questions, whether you asked for the answer key, and how many sheets were in the print. Our server also records which domain the request came in on, to keep test traffic on our preview site separate from the real count. That is a bare tally with no cookie, no identifier and no sheet content attached: it tells us Year 3 times tables was printed four hundred times last week, and nothing whatsoever about who printed it. Since 4 September 2026 the same tally also records that someone signed up for the weekly email, and on which page — never the address. If your browser sends the Global Privacy Control signal, the tally is not recorded: the page does not send it, and the server discards it if it arrives anyway.
Analytics
We use Cloudflare Web Analytics to count page views, so we know which worksheets are worth building next. It is cookieless: it stores nothing on your device and cannot follow you between sites. It reports aggregate figures — how many people visited a page, which country they were in, roughly how fast the page loaded — and never builds a profile of you. It is not loaded if your browser sends Global Privacy Control.
The worksheet tally described above is recorded by Cloudflare Workers Analytics Engine, on our own domain rather than through a third party. It is cookieless for the same reason page views are: nothing is written to or read from your device. It holds counts, not people — there is no visitor identifier in it to group by.
Collecting either of them does involve processing your IP address in transit. That makes it personal data under UK GDPR even though it is never stored against you, so it is named here. The lawful basis is our legitimate interest in understanding which pages are used. We treat Global Privacy Control as an objection to both and honour it automatically; nothing is stored to remember that you objected, because the signal arrives with every page. The cookie policy says how to turn it on.
Retention. The worksheet tally is kept for three months on a rolling basis by Cloudflare Workers Analytics Engine, then it ages out automatically. Cloudflare Web Analytics doesn't publish a fixed retention period for page-view figures — see Cloudflare's own documentation for how that product handles data.
The weekly email
Every year page has a box offering a fresh sheet for that year every Monday in term time. If you type your address into it, we keep that address — the one thing on this site you can give us. With it we keep the year group you chose and the date and time you confirmed. Nothing else: no name, no child's details, no worksheet content. The box is for parents, carers and teachers, it is optional, and it is never needed to use the site.
Nothing is sent until you click the confirmation link in the first email; until then the address is held as unconfirmed and receives no mail. The lawful basis is your consent (UK GDPR article 6(1)(a), and regulation 22 of the Privacy and Electronic Communications Regulations), which you can withdraw at any time: every email carries an unsubscribe link, and using it stops the emails and removes the address from the list. You can also email hello@tickedpractice.co.uk to have it erased.
The list is held by MailerLite, our email provider, acting as our processor. For customers in the UK and the EU its contracting entity is MailerLite Limited, Dublin, and subscriber data is stored in the European Union, which the UK recognises as providing adequate protection for personal data. MailerLite records the IP address and time of your confirmation click, as double opt-in requires; we do not send it your IP address ourselves, and we have its open and click tracking switched off. Its own privacy policy and data processing agreement describe its handling.
Retention. Your address stays on the list until you unsubscribe, ask for it to be erased, or we close the list. An address that is never confirmed is deleted after a month.
Hosting
The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes your IP address in order to deliver the page to you and to protect the site from attack and abuse.
Cloudflare, Inc. is based in the United States, so this can mean transferring your IP address outside the UK. Cloudflare's data processing terms rely on the EU Standard Contractual Clauses together with the UK's International Data Transfer Addendum as the safeguard for that transfer.
Cookies
Ticked sets no cookies at all. There is no cookie banner because there is nothing to consent to. See the cookie policy for the detail, including what would have to change before that stopped being true.
Advertising
There are no adverts on Ticked today, and no advertising code of any kind. If that ever changes, this page will be rewritten before a single advert is served, and you will be asked for consent first — because ad technology sets cookies, and consent must come before the storage, not after it.
Children
Ticked is written for parents, carers and teachers, not for children. There is no login, no profile and nothing aimed at a child user; a child only ever sees the printed sheet. The weekly email is for adults, and we do not knowingly accept a child's address. We do not knowingly collect any data about children.
Your rights
Under UK GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, and to data portability. Apart from a weekly-email address, we hold no personal data that could identify you, so for most visitors these have nothing to act on — but the rights stand, and you can use the contact route above to exercise them. If you are on the weekly list, the unsubscribe link removes you, and email hello@tickedpractice.co.uk to have your address erased or to be told what we hold: the address, the year group and the confirmation time.
If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk.
Changes
If this policy changes materially, the date at the top of this page changes with it. The current version describes a site with no adverts, no cookies, no accounts, and one optional weekly email.