This notice explains what data Code Buddy CS collects, why, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Data Controller: King James School
Contact: allgare@king-james.co.uk
Code Buddy CS is an educational tool used within King James School for Python programming practice and live coding sessions.
2. Do we use cookies?
We use two types of storage. Neither is used for advertising or tracking.
| Storage type | What it stores | Consent required? |
|---|---|---|
| Browser localStorage | Your code drafts, saved locally on your own device so you don't lose work between sessions. This data never leaves your browser. | No — strictly necessary |
| Session cookie | A temporary authentication token set when a teacher logs in to the dashboard. Deleted when the browser closes. | No — strictly necessary |
No third-party tracking cookies are used on this site. No advertising cookies, analytics cookies, or social-media pixels are set.
3. What personal data we collect
Live coding sessions (students)
When your teacher creates a live session and you join, we collect:
- Your display name — the name you type when joining a session. This does not need to be your real name.
- Your code submissions — the Python code you submit during a live session, together with the automated test results and marks.
This data is stored temporarily in a database on the school's server for the duration of the session. Teachers can export results and then delete the session. When a session is deleted, all associated data is permanently removed.
Individual assignments (outside live sessions)
No personal data is sent to the server when you work on assignments independently. Your code is saved in your own browser's localStorage only and is never transmitted.
Teacher accounts
Teachers set a session password when creating a live session. This password is stored as a hash and is used only for authentication. No other personal data about teachers is stored by the application.
4. Lawful basis for processing
| Data | Lawful basis |
|---|---|
| Student display names and submissions in live sessions | Legitimate interests — used solely for educational feedback within the school setting (Article 6(1)(f) UK GDPR) |
| Session authentication cookie | Legitimate interests — strictly necessary to operate the teacher dashboard securely |
5. Third-party services
The site loads code from third-party content delivery networks (CDNs). When your browser fetches these files, your IP address is sent to those providers. We have no control over their processing.
| Service | Purpose | Provider privacy policy |
|---|---|---|
| jsDelivr CDN cdn.jsdelivr.net |
Loads Pyodide (Python runtime that runs in your browser) | jsdelivr.com/privacy-policy |
| Cloudflare CDN cdnjs.cloudflare.com |
Loads Monaco Editor (the code editor) | cloudflare.com/privacypolicy |
| Socket.IO CDN cdn.socket.io |
Loads the real-time communication library used in live sessions | socket.io/privacy-policy |
| Render render.com |
Cloud hosting provider. The Code Buddy CS application and database run on Render's servers in the EU (Frankfurt, Germany). Any data submitted during live sessions (display names, code submissions) is processed and stored on Render's EU infrastructure. | render.com/privacy |
All fonts used on this site are system fonts loaded from your own device. No font data is sent to Google or any other external service.
6. Data retention
| Data | Retention |
|---|---|
| Live session data (names, submissions, marks) | Until the teacher deletes the session. Teachers are asked to delete sessions after use. |
| Code drafts in localStorage | Stored on your device until you reset the assignment or clear your browser storage. |
| Session authentication cookie | Deleted when the browser tab is closed (session cookie). |
7. Who we share data with
We do not sell, rent, or share personal data with any third party for commercial purposes. Data within live sessions is accessible only to the teacher who created the session and to school staff with legitimate educational need.
8. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of personal data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — ask us to delete your data
- Restriction — ask us to limit how we use your data
- Object — object to processing based on legitimate interests
- Portability — receive your data in a portable format
To exercise any of these rights, contact allgare@king-james.co.uk.
You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint or call 0303 123 1113.
9. Children's data
This site is used with students aged 11–18. We collect the minimum data necessary for educational purposes. Students do not need to provide their real name — a username or first name only is sufficient for live sessions. No data about students is shared outside the school, sold, or used for any commercial purpose.
10. Image credits
| Image | Used on | Source / attribution |
|---|---|---|
| StudyHub CS logo (logo.png) |
Site header / Open Graph | Created by Miss Allgar using Adobe Express. All rights reserved — King James School. |
| Unpack, Modify, Judge icons (unpack.png, modify.png, judge.png) |
Jump activity tabs | King James School CS teaching materials. |
| Level badge icons (1.png, 2.png, 3.png) |
Jump program challenge levels | King James School CS teaching materials. |
11. Changes to this notice
We may update this notice from time to time. The date at the top of this page shows when it was last revised. Continued use of the site after an update constitutes acceptance of the revised notice.
12. Contact
For any privacy-related questions or requests:
Miss Allgar
King James School
allgare@king-james.co.uk