Privacy

Everything on School Ninja can be used without an account, and no page asks who you are. The site runs no advertising scripts.

Cookies

The site itself sets no cookie when you visit. The exception is a choice you make: your answer to the recordings question is kept for six months in sn_recording (see Recordings). Cloudflare, which sits in front of the site, may set its own security cookie (__cf_bm) to tell visitors apart from automated traffic.

We count visits with Google Analytics, which Cloudflare loads for us through a service called Zaraz. It sets these cookies: cfz_google-analytics_v4 and cf_zaraz_client, each kept for a year, and cfzs_google-analytics_v4, removed when you close your browser. They hold a random number that tells one visit from the next, not your name. The security cookie __cf_bm lasts 30 minutes, and if Cloudflare asks your browser to pass a check it keeps a second one, cf_clearance, for a year. Our own browsers carry one more, sn_notrack, kept for a year, so our own visits are left out of these counts.

What we measure

We count the pages people view and a few things they do on them: opening a paper, a topic or a note, how long a page stays open, how many questions were on screen, showing an answer or a mark scheme, turning answers on or off, opening a PDF, following a link to revise a topic, marking a question solved, saved or self-marked, reaching the end of a note and sending a problem report. Each of these carries only the names of the page's level, subject, board, paper, topic and question, the same names that are in its address.

We never send what you type or choose: not your answers, not the marks you give yourself, not the text of a report, not a name or an email address. Cloudflare passes each visit on to Google, and we see only totals. We never combine this with anything else and never use it for advertising.

Recordings

After you send us an idea, the bar at the bottom of the page asks if you want to help more. If you press Sure, Microsoft Clarity records how you use the site - your clicks, scrolls and the pages you view - so we can see where it is confusing and fix it. Anything you type is hidden from the recording. Clarity then keeps two cookies, _clck for a year and _clsk for a day, so your pages join up into one visit. If you press No thanks, or never answer, Clarity sets no cookie and sees each page on its own, with nothing linking one page to the next. To change your mind, use Cookie settings at the bottom of any page: pressing No thanks there stops the recording and removes Clarity's cookies.

Kept in your browser only

The questions you mark as solved or save on a topic page, with the answers you type there and the marks you give yourself, the tier or option you last picked on a board page, and the filters you last set on a topic page are kept in your browser's local storage, so the site can show them back to you. They never leave your device and we cannot see them. Clearing this site's data in your browser removes them. The site itself keeps nothing else about you. Google Analytics counts the pages viewed and the actions above without knowing who you are.

Problem reports

If you report a problem with a question, we store the question, what you said was wrong, your note if you wrote one, the address of the page and your browser's user agent string. We do not store your IP address. We store a one-way hash of it mixed with the date, used only to limit reports to 20 a day, and it cannot be turned back into the address. Reports are never shown on the site.

Ideas

If you send an idea from the bar at the bottom of the page, we store what you wrote, your email if you gave one, the address of the page, what kind of page it was and whether you were on a phone or a computer. Your email is used only to reply to you. We do not store your IP address, only the same one-way hash as for problem reports, used to limit ideas to 20 a day. Ideas are never shown on the site.

Email

If you email hello@school.ninja, your address and message are used to reply to you and to act on what you asked.

Hosting

The site is hosted on Laravel Cloud behind Cloudflare. Like any web server, they process your IP address and browser details to deliver pages and to protect the site from abuse. When a paper opens in our reader, our server fetches the file from where it is published, so the board or archive that publishes it sees our server rather than you.

Last updated 7 October 2026.