Revision Library (revisionlibrary.co.uk) is a free library of printable revision materials for tutors and students, run from the UK. This page explains what little data the site touches, which cookies it can set, and the rights you have over your information.

Last updated: 5 September 2026.

What we collect

The site has no login, no password and no account to set up, and normal browsing asks you for nothing. Three kinds of data can arise from using it: two are described here, and opening a PDF in a browser can trigger an email check, covered in its own section below.

Pack details you type in. A student name or initials entered in the Pack Builder is used only to generate the PDF you asked for. It is sent to our server for that one request, printed onto your pack, and not stored afterwards.
Standard server logs. The site is hosted on Vercel, which keeps routine technical logs (such as IP address and browser type) for security and to keep the service running, as any web host does.

Download records and the email check

Every PDF the site hands out - whether it is one of the printed worksheet packs or one built by a builder - is logged on our server: which file, when, the page that referred you, your browser's user agent, and a hashed identifier for the network the request came from. We never store your raw IP address. The identifier is a one-way SHA-256 hash of your IP address combined with a private secret we hold; it cannot be reversed back into an IP address, but under UK GDPR it still counts as personal data, because it can identify a network even without naming it. We keep this hash stable so aggregate download records and unusual download bursts can be measured consistently; it never decides whether your browser may download, and it is not stored on the access record described below.

The first time a PDF is opened or downloaded in a browser, we ask for an email address before the file is sent. You type it in and carry straight on. That opens every PDF on the site in that browser for the next 14 days, counted as 14 times 24 hours from the moment you submitted the address. What decides it is a signed access cookie stored in that browser, described under Cookies below, and nothing else: not your IP address, not the network you are on, and not whether somebody else on the same connection has given an address. A different browser or device is asked separately, even on the same Wi-Fi, and moving between networks does not log an authenticated browser out. Once the 14 days are up, its next download asks for an address once more; visiting the site does not renew the period, only a fresh submission does. Clearing its cookies or using a private window also produces a fresh ask. We do not send you anything to confirm it, and there is nothing to click or type back. This creates no password, no profile and no account to log into.

What is stored when you enter it: the email address as you typed it, a lower-case copy of it used for matching, the date and time you entered it, and which file you were downloading at the time. A separate yes/no marketing preference is stored alongside it, defaults to no, and is only ever turned on if you actively tick the box. Nothing is ever sent to an address that has not ticked it.

Each time you submit an address we also store one access record: which address, when it was submitted, when the 14-day period ends, and which page asked. Once you have given an address, the downloads that browser goes on to take during the period are linked to that record, and through it to the address. We use that link for one purpose only: to see which files a given address has downloaded, so we can answer that question if we ever need to. It is kept for exactly as long as we hold the address itself, it is never shared with anyone outside Revision Library, and it is never sent to Google Analytics or any other third party. The access record itself holds no IP address and no network identifier.

Because we do not check the address, we cannot tell a real one from a mistyped or made-up one, and we do not treat having it as proof of anything. Email addresses are not deleted automatically: we keep them until you ask us to remove yours or to turn off marketing, which you can do using the contact details below.

We rely on legitimate interests as the lawful basis for the download log and for asking for an address, since both exist to keep the library running and free rather than to profile individuals; sending you anything at all relies on your separate, opt-in consent instead.

This data is stored in Supabase (a PostgreSQL database, hosted in London). Access controls are switched on for every table with no exceptions granted, so only our server can read or write it - nothing is readable directly from your browser.

Cookies and similar technology

Essential. Three values in your browser's local storage keep the site working the way you left it: your cookie choice (rl_cookie_consent_v1), a note that the choice was made on the banner as it stands today rather than an older one (rl_cookie_marketing_named_v1, and the Marketing paragraph below says what that is for), and your light/dark theme preference (theme). These never leave your device. When you enter an address at the download check, the site also sets a signed, HttpOnly access cookie (revision_library_access) and a small readable mirror (revision_library_access_hint) that expire 14 days after you submitted. The first is a random access-record identifier signed by our server; it does not contain your email address, and it cannot be created or altered without a secret only our server holds. The second carries only the expiry time, so the page can tell whether to show the form without asking the server. Together they are the only thing that tells the site this browser has already supplied an address; they are strictly necessary to deliver the access period you requested, they are set whether or not you accept analytics or marketing cookies, and they are never used for analytics, advertising or tracking.

Your own work, kept on your device. The study tools remember where you got to, so you can carry on rather than start again. That is four more local-storage values: rl_selfcheck_v1 (which practice questions you have marked right or wrong on a topic guide), rl_pack_check_v1 (the same, for the instant-marking panel on a worksheet page), rl_daily_streak_v1 (which days you have ticked off in Daily Practice, and the run that makes) and rl-flashcards-weights-v1 (how often you want hard, medium and easy flashcards to come round). All four are readable only by that browser and are cleared when you clear the site's data, and none of the four records is ever uploaded. Two of them do have an analytics counterpart, and only if you accepted analytics cookies: marking an answer on a topic guide counts one right or wrong against that topic - never the answer you typed - and ticking a Daily Practice day sends the length of the run it makes. In both cases it is that one fact that is sent and not the stored record, and neither happens at all if you did not opt in.

Small preferences. Two values remember that you closed something so it is not put in front of you again: rl_email_ask_v1 (the optional email ask under the Pack Builder) and rl-pack-badge-legend (the key explaining the badges in a topic list). One further name, rl_analytics_exclude_v1, is only ever read: it is a flag we set by hand on our own devices so our own visits are left out of the statistics. The site never writes it, so it will not be in your browser unless you put it there.

Analytics (optional). If - and only if - you accept analytics cookies, we load Google Analytics 4, which sets first-party cookies (_ga and similar) and sends us anonymous, aggregated usage statistics so we can see which pages and tools are useful. Nothing analytics-related loads before you opt in. Google processes this data under its own privacy policy.

Marketing (optional, and off unless you switch it on). The site posts its worksheets on Pinterest, and it carries Pinterest's conversion tag (s.pinimg.com/ct/core.js) so we can tell which pins actually bring people to the library. The tag loads only if you turn Marketing on in the cookie banner - accepting analytics alone does not load it, and it is off by default. When it does load it sets Pinterest's own cookies and reports which pages of this site you visit, because the tag records a page view on every page it loads on. On top of that it reports three specific things: that a book or worksheet page was viewed, that a PDF was downloaded, and that an address was entered at the download check. It is not sent your email address: Pinterest's optional Enhanced Match feature, which would pass the address on, is deliberately switched off. The cut-down banner on the printable worksheet pages cannot turn marketing on at all - it offers analytics only, and says so.

If you accepted cookies before the banner named Pinterest. The banner has not always named it, and an “accept everything” given before it did was not consent to this tag - we are not treating it as one. The next time such a browser opens a page of the main site, that stored choice is narrowed once to analytics only: the tag stays off until Marketing is switched on from the banner, your analytics choice is untouched, and you are not asked anything again. Until that first visit the tag can still load on the printable worksheet pages, which run their own cut-down script and never perform this narrowing. Anything chosen on the banner as it stands now is left exactly as you set it. Pinterest processes what it does receive under its own privacy policy.

Changing your cookie choices

You can withdraw or change your consent at any time. Press the button below and the cookie banner will reappear so you can pick again; “Manage options” on it is where the analytics and marketing categories are switched on and off one at a time.

Your rights

Under UK data protection law (UK GDPR), you have the right to access, correct, delete, or restrict the use of personal data held about you, and to object to or port that data. This applies to the email address described above, and to the hashed network identifier in the download log. The site still keeps no accounts, no passwords and no profile, so most requests are simple to act on: contact us using the details below and we will handle it. You can also complain to the UK regulator, the Information Commissioner's Office.

Changes to this policy

If how the site handles data changes (for example, if a new analytics or marketing tool is added), this page will be updated and, where the change is material, the cookie banner will ask for fresh consent.

Contact

For any privacy question - including a request to see, correct or delete the data described above - email hello@revisionlibrary.co.uk.

Your data, kept simple.