Privacy

Last changed 26 October 2026.

Who we are

Graphacon is an A-level economics study site, run by Lawan Sado, a sole trader, trading as Graphacon, at The Bristol Office, 2nd Floor, 5 High Street, Westbury-on-Trym, Bristol, BS9 3BY. We decide what happens to the information this page describes, so we are the ones to ask about it, at help@graphacon.com.

What we keep, and why

If you join the waitlist

• WhatYour email address.
• WhyTo send you news while Graphacon is built, and to tell you when it opens.
• WhereKit, the service that stores our list and sends our emails.
• How longUntil you leave. Every email has a link to leave, or you can email us and we will take you off.
• Legal reasonYou asked to join (your consent).
• Do you have to?No. If you don't join, the only difference is that you won't get the emails.

What stays on your phone or computer

Your place in each lesson, your settings and which lessons you have finished are saved by your browser, on your own device. We never collect or keep them. Your answers in the test papers are never saved. Clearing this site's data in your browser deletes everything it kept. If you open any of our pages with ?nocount at the end of its address, your browser keeps a note to leave you out of the visitor counts below, until you open one with ?count. That note stays on your device too, and we never see it.

Visiting the site

• Visitor counts. Vercel Web Analytics counts visits for us. On the front page it also counts what people do there: starting one of the free lessons, finishing one, getting a quarter, a half or three quarters of the way through one, which sentence of a lesson you reached, and turning the sound on. It counts which of six parts of the page you scrolled to (the lesson, the library, the comparison, the price, the questions and the end of the page), once a part has filled about a third of your screen for half a second. And it counts pressing Get a pass. On the payment page it counts each time the page opens, with one label for the page you came from: the front page (and whether you came in through our TikTok, Instagram or email link), the About us page, another page of ours, another website, or none. It never sends the address of that page. It uses no cookies, does not store your IP address, and we only ever see totals, like how many people started a lesson or reached the price.
• Our own tally. Some browsers block Vercel's counter, so our server also keeps a daily total of its own: one more each time it sends the front page to a browser, by the address it was asked for (our plain address, or our TikTok, Instagram or email link), and one more each time the payment page starts a checkout, with the label above. It keeps nothing about who: no address, no device and no cookie. Each day's totals are deleted 400 days after that day's last addition.
• Hosting. Our host, Vercel, uses your IP address and browser details to send you each page, and keeps them in technical logs for a day at most.
• Drawing the graphs. Our server draws every graph. Your browser sends it the lesson's name, the graph's settings (like where a line has been dragged) and the size of the space to draw in. None of that says who you are, and the server keeps none of it once the picture is sent back.
• Cookies. We set one: it remembers the access link that comes with a pass, so the paid lessons open for you. It lasts 60 days after your last visit and does nothing else. On the payment page only, Stripe's payment form sets two of its own, __stripe_mid and __stripe_sid, and reads details about your browser and device, to help stop card fraud. Stripe uses them only for fraud prevention and security, never for advertising. No advertising or tracking cookies, which is why there is no cookie banner.

The legal reason for all five: running the site and knowing how many people visit it, which the law calls our legitimate interests.

If you message us

If you email us, or message us on TikTok or Instagram, we use what you send to reply to you. Emails to help@graphacon.com pass through Resend, a service that delivers them to our Gmail inbox. Messages sent inside TikTok or Instagram are also covered by those apps' own privacy policies.

If you buy a pass

• WhatYour email address, the name and country on your card, what you paid and when, and that you agreed to the terms. If you pay from outside the UK, also your billing address, which your country's tax needs. Stripe takes your card details in its own payment form on our payment page, and we never see your card number. Then the access link we email you, and the cookie that remembers it on your device. And one label for the page that sent you to the payment page, such as "TikTok link", kept with the payment.
• WhyTo give you the pass you paid for, to send your access link and answer you about it, to keep the records the tax office requires, and to see which of our links lead to a sale.
• WhereStripe, the payment company. If you pay from outside the UK, Onelink, Stripe's checkout service, sells you the pass and keeps its own record of the sale under its own privacy policy. Resend, which emails you your access link. Our Gmail inbox, where your replies arrive. Vercel, which checks the cookie when you open a lesson.
• How longRecords of your payment for six years after the tax year you paid in, because the tax office requires them. Your access link stops working when your pass ends, and the cookie deletes itself 60 days after you last open Graphacon.
• Legal reasonTo give you what you paid for (our contract with you), and to keep tax records (a legal duty).
• Do you have to?Only to buy. Elasticity, PPF and Indirect Tax need nothing from you.

Who else handles it

We use a few services to run Graphacon, and each only handles what it needs for its own job: Kit (the waitlist), Stripe (taking payment for a pass), Resend (emailing your access link, and passing emails sent to help@graphacon.com to our inbox), Google (our Gmail inbox, where emails to us arrive) and Vercel (hosting, drawing the graphs and visitor counts). We do not sell or give your information to anybody else.

Kit, Stripe, Resend, Google and Vercel are based in the United States, so some of this information may be stored there. All five have signed up to the UK's data bridge with the US (the UK Extension to the EU-US Data Privacy Framework), which UK law accepts as keeping it protected there.

What you can ask us

You can ask us to:

• show you what we hold about you
• correct it
• delete it
• stop using it
• give you a copy to take somewhere else

You can also change your mind about anything you agreed to: for example, you can leave the waitlist. Email help@graphacon.com and we will answer within a month, which is the legal limit.

Nothing here is decided about you by a computer, and we do not build a profile of you.

If you are unhappy with how we have handled your information, tell us first and we will try to put it right. You can also complain to the Information Commissioner's Office, the UK's data regulator, at ico.org.uk/make-a-complaint.

If you are under 13

Graphacon is made for sixth-formers. If you are under 13, ask a parent or carer before you join the waitlist.

If this page changes

The date at the top changes with it. If we start collecting something new, it will be on this page before we do.