Privacy

What is not collected

• no advertising, ad network or affiliate tracking
• no tracking pixels, session recording or heatmaps
• no third-party analytics service — no Google Analytics, no equivalent
• no date of birth, home address, phone number or photograph; there is nowhere to enter them
• no health information about you, and nothing that would be special-category data
• no selling or sharing of anything with anyone for their own purposes

Typefaces are compiled into the site at build time rather than requested from a font service while you browse, so reading a page does not make a request to a third party on your behalf.

Without an account

The home page, the 3D anatomy explorer and the public pages set no cookies and store nothing. Your browser fetches pages from our hosting provider, which handles the network request and keeps standard delivery and security logs; nothing in the application writes a record of your visit.

With an account

Signing in sets a session cookie, which is what keeps you signed in and is not used for anything else. The account itself holds:

• your email address, and a display name if you set one;
• your programme and year of study, if you tell us, so revision is sequenced sensibly;
• your revision record: which questions you attempted, whether each was right, and the study days that make up a streak;
• where a university licenses your access: which organisation, the student reference it supplied, and your cohort;
• anything you type into the “something missing?” form, which goes to the people writing the material and is not shown to your university.

Your university sees aggregate performance for groups of students, never an individual’s answers, and never below a minimum group size. That is a property of the database rather than a promise about our reporting screens — the detail is in the security overview.

Who else is involved

A small number of suppliers process data on our behalf to host the platform, authenticate accounts and take payments. Each is named, with what it can see and where it holds it, on the subprocessors and cookies page. The processing terms offered to universities are published in full at data processing terms.

Your rights

You can export everything held about you, and ask for your account to be erased, from your account settings — both are self-service rather than a request you have to chase. Where your access is licensed by a university, that university is the controller for your learning record and may have its own retention obligations; we act on its instructions and will tell you when that is the case.

Questions about any of this can go to editorial@bodyanswers.example.com, or via the contact page.