Privacy

Last updated 4 November 2026

Ticked is a free, static worksheet site. It has no accounts and sets no cookies. The worksheet tool stores nothing you type; the one thing the site can hold is an email address, and only if you ask for the weekly sheet. This page explains the little data that does get processed, and why.

Who is responsible

The data controller for this site is Enrico Pelizzon. For any question about this policy, or to exercise the rights below: email hello@tickedpractice.co.uk.

Worksheets never leave your browser

Every worksheet is generated on your own device, by code running in the page. The problems, the answers and the PDF are built in your browser and are never uploaded — there is nothing for us to keep, and no way for us to reconstruct a sheet you made.

We do count that a sheet was made, printed or downloaded, or its link sent on from a phone's share menu, along with the page it happened on, which worksheet type it was, and the options you had set — how many questions, whether you asked for the answer key, and how many sheets were in the print. Each count also says whether it came from a phone or from a bigger screen, worked out from your screen's size and sent as one of those two words and nothing finer, so we can see whether people on phones print or want something else. We also count when a page is opened from a link to one particular sheet — a copied link, a bookmark, the code on an answer key, or the link in our weekly email — noting only whether it was the weekly email or any other sheet link, and anything then made, printed or downloaded on that page carries the same note. That is how we can tell that sheets get used again without knowing who uses them: the link itself and the sheet number are never sent. Our server also records which domain the request came in on, to keep test traffic on our preview site separate from the real count. That is a bare tally with no cookie, no identifier and no sheet content attached: it tells us Year 3 times tables was printed four hundred times last week, and nothing whatsoever about who printed it. Since 4 September 2026 the same tally also records that someone signed up for the weekly email, and on which page — never the address. If your browser sends the Global Privacy Control signal, the tally is not recorded: the page does not send it, and the server discards it if it arrives anyway.

The practice times tables check works the same way. Its questions are made in your browser, the answers are marked there, and none of it is sent or kept — not the score, not the answers, not how long each one took. The tally records only that a check was finished, how many questions it had, and which settings were chosen: the real check's mix of tables or tables you picked, and six seconds, twelve or no time limit. When the practice sheet it offers is opened, anything then made, printed or downloaded on that page is noted as having come from the check, in the same way as the weekly email's links.

At most once a week, the tally also records how long it has been since this browser last opened a worksheet page — new, last week, two to four weeks, or five weeks or more — along with the page it happened on. That is worked out from a single date your browser keeps, which the cookie policy describes; the date stays in your browser, and only the label is sent. It is how we can tell whether people come back, and it identifies no one. If you have switched the counting off on the cookie policy page, or your browser sends Global Privacy Control, none of the tally is recorded and no date is kept.

Analytics

We use Cloudflare Web Analytics to count page views, so we know which worksheets are worth building next. It is cookieless: it stores nothing on your device and cannot follow you between sites. It reports aggregate figures — how many people visited a page, which country they were in, roughly how fast the page loaded — and never builds a profile of you. It is not loaded if your browser sends Global Privacy Control, or if you have switched the counting off.

The worksheet tally described above is recorded by Cloudflare Workers Analytics Engine, on our own domain rather than through a third party. It sets no cookie, and it holds counts, not people — there is no visitor identifier in it to group by. The one thing it relies on your device for is the weekly count's date, which never leaves your browser.

Collecting either of them does involve processing your IP address in transit. That makes it personal data under UK GDPR even though it is never stored against you, so it is named here. The lawful basis is our legitimate interest in understanding which pages are used. We treat Global Privacy Control as an objection to both and honour it automatically, storing nothing, because the signal arrives with every page. The switch on the cookie policy page does the same for browsers without it; that choice is kept in your browser, only so that it can be honoured.

Retention. The worksheet tally is kept for three months on a rolling basis by Cloudflare Workers Analytics Engine, then it ages out automatically. Cloudflare Web Analytics doesn't publish a fixed retention period for page-view figures — see Cloudflare's own documentation for how that product handles data.

The weekly email

Every year page has a box offering a fresh sheet for that year every Monday in term time. If you type your address into it, we keep that address — the one thing on this site you can give us. With it we keep the year group you chose and the date and time you confirmed. Nothing else: no name, no child's details, no worksheet content. The box is for parents, carers and teachers, it is optional, and it is never needed to use the site.

Nothing is sent until you click the confirmation link in the first email; until then the address is held as unconfirmed and receives no mail. The lawful basis is your consent (UK GDPR article 6(1)(a), and regulation 22 of the Privacy and Electronic Communications Regulations), which you can withdraw at any time: every email carries an unsubscribe link, and using it stops the emails and removes the address from the list. You can also email hello@tickedpractice.co.uk to have it erased.

The list is held by MailerLite, our email provider, acting as our processor. For customers in the UK and the EU its contracting entity is MailerLite Limited, Dublin, and subscriber data is stored in the European Union, which the UK recognises as providing adequate protection for personal data. MailerLite records the IP address and time of your confirmation click, as double opt-in requires; we do not send it your IP address ourselves, and we have its open and click tracking switched off. The link to each week's sheet carries a short marker so that our own tally, described above, can count visits that came from the email — as a total, never against your address. Its own privacy policy and data processing agreement describe its handling.

Retention. Your address stays on the list until you unsubscribe, ask for it to be erased, or we close the list. An address that is never confirmed is deleted after a month.

If you email us

Some pages invite teachers and parents to write to us. If you do, we see your address and what you wrote, and we use them to reply and to improve Ticked, which is our legitimate interest in running the site. Your email is not added to the weekly list. Please leave out pupils' names and results. A message that is plainly from a child is deleted.

Mail to our address passes through Cloudflare and is held in a Google Gmail mailbox. Google is based in the United States, so this can mean transferring your message outside the UK; its privacy policy describes its handling. We delete a message within a year of the last reply, unless you have asked us to keep in touch.

Hosting

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes your IP address in order to deliver the page to you and to protect the site from attack and abuse.

Cloudflare, Inc. is based in the United States, so this can mean transferring your IP address outside the UK. Cloudflare's data processing terms rely on the EU Standard Contractual Clauses together with the UK's International Data Transfer Addendum as the safeguard for that transfer.

Cookies

Ticked sets no cookies at all. The one thing kept on your device is a date used only to count return visits, which the law allows without consent because it is used for nothing but statistics and you can switch it off — so there is no cookie banner. See the cookie policy for the detail, including how to switch it off and what would have to change before any of this stopped being true.

Advertising

There are no adverts on Ticked today, and no advertising code of any kind. If that ever changes, this page will be rewritten before a single advert is served, and you will be asked for consent first — because ad technology sets cookies, and consent must come before the storage, not after it.

Children

Ticked is written for parents, carers and teachers. Everything on it is set up by an adult, and almost everything a child uses is the printed sheet.

The one exception is the practice times tables check, which a child takes on screen. It was built so that using it gives away nothing about the child. There is no login, no profile and nothing to fill in. Nothing is stored on the device. Nothing about the answers is sent: the only record is the bare count described above, which the adult's settings decide. The weekly-email box is deliberately left off that page. The practice sheet it offers at the end carries the facts to practise in the part of its link after the #, which browsers keep on the device and never send to us; that sheet shows no email box and stores nothing on the device either. Opening it involves what opening any page involves — our host processing the device's IP address to deliver it, and the page-view count in the analytics section — and nothing more.

The weekly email is for adults, and we do not knowingly accept a child's address. We do not knowingly collect any data about children.

Your rights

Under UK GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, and to data portability. Apart from a weekly-email address or an email you have sent us, we hold no personal data that could identify you, so for most visitors these have nothing to act on — but the rights stand, and you can use the contact route above to exercise them. If you are on the weekly list, the unsubscribe link removes you, and email hello@tickedpractice.co.uk to have your address erased or to be told what we hold: the address, the year group and the confirmation time.

If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this policy changes materially, the date at the top of this page changes with it. The current version describes a site with no adverts, no cookies, no accounts, one date kept on your device for counting return visits, one optional weekly email, and a practice check that keeps nothing.