For teachers · privacy
Class mode privacy: exactly what we store about a pupil
The full list of what a teacher's class stores: a seat number, the test and its numeric result, kept 120 days. Pupil names stay on the teacher's device.
In one paragraph
In a teacher’s class, each result is filed under a seat number; we never receive a pupil’s name, because which pupil sits in which seat is kept only on the teacher’s own device. A pupil in a teacher’s class has no account and types no name: Send to my teacher sends the class, the seat number, the test and its numeric result, never the answers, and only when the pupil presses it, and nothing is written to the browser storage. A teacher’s class and every result in it are deleted 120 days after the class was created, or at once when the teacher deletes the class, a seat’s results or their account: removed from live storage at once, and from our encrypted backups within 35 days.
What we never receive or store
- a pupil’s name, email address or account
- anything a pupil types other than the class code, the seat number and the PIN
- the pupil’s answers, their item-by-item responses or their response times
- advertising or session replay on the pupil’s pages, or the class code, seat or PIN in our audience measurement
- the class label or the names you type beside seats
- the PIN itself: it is worked out from the seat when needed
The label a teacher gives a class and the names they type beside the seats stay in the teacher’s browser and in any roster file they export; we never receive them.
The fields, test by test
| Test | Stored per send, with the seat number and the minute it arrived |
|---|---|
| Attention Span Test | only that the pupil finished |
| Digit Span Test | the longest span reached, or nothing when the page did not count a figure |
| English Level Test | the number right and the number of questions, or nothing when the page did not count a figure |
| Financial Literacy Quiz | the number right and the number of questions, or nothing when the page did not count a figure |
| Go/No-Go Test | the per cent of correct responses, or nothing when the page did not count a figure |
| Grammar Test | the number right and the number of questions, or nothing when the page did not count a figure |
| Matrix Reasoning Test | the number right and the number of questions, or nothing when the page did not count a figure |
| Number Sequence Test | the number right and the number of questions, or nothing when the page did not count a figure |
| Reaction Time Test | milliseconds, or nothing when the page did not count a figure |
| Reading Speed Test | words per minute, or nothing when the page did not count the speed, and questions right out of six |
| Selective Attention Test | the interference in milliseconds, or nothing when the page did not count a figure |
| Sequence Memory Test | the longest span reached, or nothing when the page did not count a figure |
| Short-Term Memory Test | the number right and the number of questions, or nothing when the page did not count a figure |
| Spanish Level Test | the number right and the number of questions, or nothing when the page did not count a figure |
| Spatial Rotation Test | the number right and the number of questions, or nothing when the page did not count a figure |
| Spelling Test | the number right and the number of questions, or nothing when the page did not count a figure |
| Spot the Fallacy Test | the number right and the number of questions, or nothing when the page did not count a figure |
| Stroop Test | the interference in milliseconds, or nothing when the page did not count a figure |
| Typing Speed Test | words per minute, or nothing when the page did not count a figure |
| Verbal Memory Test | the number right and the number of questions, or nothing when the page did not count a figure |
| Visual Memory Test | the longest span reached, or nothing when the page did not count a figure |
| Visual Search Test | the number right and the number of questions, or nothing when the page did not count a figure |
| English Vocabulary Test | the number right and the number of questions, or nothing when the page did not count a figure |
| Working Memory Test | the number right and the number of questions, or nothing when the page did not count a figure |
Pupils under 13
Pupils may be under 13; they join only through their teacher, need no account, and give us no name, email address or other typed detail beyond the class code, the seat number and the PIN on their card. On the pages pupils use in a teacher’s class, our servers see the network address only to deliver the page and to count failed joins against abuse limits, under a keyed one-way hash that expires after two hours. Our audience counter on those pages runs on a server we operate ourselves, not with an analytics company and not on Amazon Web Services, and we use it only for our own internal operations: it sets no cookie, works out a session hash from the network address and the browser’s user agent that changes every month, stores no persistent identifier, and is set to ignore the part of the page address after the #, so it never receives the class code, the seat, the test or the PIN. Those pages show no advertising and load no session replay, and nothing on them is used to contact a pupil, build a profile or show advertising.
Who is responsible for what
For the results your pupils send, your school (or you, if you act on your own account) decides why they are collected, and we process them only to provide the class to you. These are our commitments, from section 4c of the terms:
When you run a class, your school (or you, if you act on your own account) decides why pupils’ results are collected, and MyTestAtlas processes them only to provide the class to you: we do not sell them, use them for advertising or profiling, show them to anyone else, or keep them in live storage beyond 120 days.
You confirm that your school allows you to use this service, or that you have any consent your school or local law requires; that you will not put a pupil’s name or other identifying detail into the service; and that you will use results for practice and your own overview of the class, never to grade, place, rank or diagnose a pupil (section 4b).
As the processor of those results, under Article 28 of the GDPR and the UK GDPR, we:
- process them only on your documented instructions, which are these terms and what you set in the class, and tell you at once if we think an instruction infringes data protection law;
- make sure everyone who handles them is bound to confidentiality;
- protect them with the security measures in section 10 of the privacy policy (Article 32);
- use sub-processors under your general written authorisation, which you give by accepting these terms: today Amazon Web Services (hosting, in the EU) and, for your sign-in only, Google. We tell you, by email to your account address, before we add or replace one, and you may object; if you do, you can delete your classes before the change takes effect. Each sub-processor is bound by a written contract to the same data-protection obligations as these terms (Article 28(2) and 28(4));
- help you answer a request from a pupil or parent, which we pass to you because only your device can tell which seat is theirs;
- help you, with the information we hold, with a data protection impact assessment and with any prior consultation of a supervisory authority (Article 28(3)(f));
- at the end of the service, return the results as the CSV export on your class page or delete them, as you choose; deleting a class, a seat’s results or your account removes them from live storage at once and from our encrypted backups within 35 days, and everything is deleted after 120 days (Article 28(3)(g));
- give you the information needed to show these commitments are kept, and allow and contribute to audits, including inspections, by you or an auditor you mandate, on reasonable notice (Article 28(3)(h));
- email your account address without undue delay if we learn of a breach affecting your class.
For schools in California and elsewhere with similar rules for services designed for school use: we do not use pupils’ results or anything about the pupils’ pages for targeted advertising, do not build a profile of a pupil, do not sell or rent any of it, keep it secured, and delete it when the teacher or school asks.
The free caps are stated with their date on /teachers/ and may change; a change never deletes a class you already have before its 120 days.
For school IT
- Hosting: Amazon Web Services, Frankfurt (eu-central-1), served over HTTPS.
- Sign-in: Google, for teachers only. Pupils never sign in.
- Access: only the signed-in teacher who made a class can read it. A pupil’s PIN earns a token that can send one test’s result for at most three hours and can read nothing.
- Deletion: a seat’s results, a class or the whole account, at once, by the teacher; everything 120 days after the class was made.
- Limits: per seat, per class and per network address, against PIN guessing; joining works only while the teacher has the class open.
- Results are worked out in each pupil’s browser, so a determined pupil could alter one; they are practice figures, not marks.
The full policy is in section 2.9 of the privacy policy and section 4c of the terms. Free caps as of 10 October 2026: 6 classes, 60 seats each.