Privacy Notice

1. Who we are

ScienceForge is operated by Science Forge ("we", "us"). We are the data controller for the personal data we collect through ScienceForge. If you have questions about this notice or your data, contact us through the website.

2. What we collect

• Account data — your name, email address and login credentials, used to create and secure your account (legal basis: performing our contract with you).
• Profile and study data — your exam board and subject choices, quiz scores, flashcard progress, planner entries and exam dates, used to provide and personalise the service (legal basis: contract).
• Support messages — if you contact us, we keep the conversation so we can help you (legal basis: legitimate interests).
• Usage and device data — basic technical information such as IP address, browser type and pages visited, used for security, fraud prevention and improving the product (legal basis: legitimate interests).

Payment details are collected and processed by Paddle (our Merchant of Record), not by us.

3. Who we share data with

• Service providers — hosting, database and analytics providers who process data on our behalf under contract.
• Paddle — our Merchant of Record, for selling subscriptions, taking payment, tax compliance and invoicing.
• Professional advisers — such as accountants or lawyers, where needed.
• Authorities — where we are required to by law.

We do not sell your personal data.

4. International transfers

Some of our service providers process data outside the UK/EEA. Where this happens we use appropriate safeguards, such as adequacy decisions or standard contractual clauses.

5. How long we keep data

We keep your account and study data while your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we must keep records by law (for example, tax records held by Paddle).

6. Your rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Ask us to erase your data.
• Restrict or object to processing, and withdraw consent where we rely on it.
• Receive your data in a portable format.
• Complain to the UK Information Commissioner's Office (ICO) or your local supervisory authority.

We respond to rights requests within one month. Contact us through the website to exercise any right.

7. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls and row-level security in our database — to protect your data. No system is perfectly secure, but we work to keep yours safe.

8. Young users

ScienceForge is designed for students aged 14–16. We collect the minimum data needed to run the service and never show behavioural advertising. If you are a parent or guardian with concerns about your child's data, contact us and we will help.

9. Cookies

We use essential cookies only — the ones needed to keep you signed in and make the site work. We do not use analytics or marketing cookies. You can block cookies in your browser settings, but sign-in will stop working.