Legal & policies
Straight talk about your rights, our rules and your data.
Every document is written in plain English first, with the legal detail underneath. 13 documents · last updated 4 Nov 2026 · questions to contact@cswithzak.com.
No accounts, no ads
Progress lives in your browser; nothing is sold, ever.
AskZ is an AI
It can be wrong — the mark scheme wins. Don't type private details into it.
Not Cambridge
An independent teacher's site. Cambridge material is theirs; one email removes anything.
What changed
Material changes are listed here for at least 30 days (Terms §14). Each document also carries its own version and date.
Report a date (signed in) and timetable emails for approved teachers: what each keeps and for how long (Privacy, Date watch).
Dates you can trust: a weekly watcher re-reads Cambridge's timetables and the official university pages, and every date it changes is listed on the public What changed page (no personal data). You can subscribe to the exam calendar; its address names only the series, zone, course and countries you picked (Privacy, Date watch; the `zak-planner-v2` row of the Cookies notice).
Copyright §2: mark-scheme cutouts. On a past-paper question the mark scheme can now be shown as the rows cut from Cambridge's own mark-scheme PDF (Cutout ⇄ Text), with the paper's reference and the © line, served with the same no-index instruction as the question pictures; nothing is offered as a clean downloadable page, and marking still reads the typed rows.
The site now has an Arabic interface at /ar. Cookies §3–4: one new cookie, `zak-lang`, set only when you press the EN | ع language switch; it holds “en” or “ar”. Privacy §3b: without that choice, the home page uses the country Cloudflare attaches to the request and your browser's language to decide whether to open in Arabic; neither is stored. Accessibility: the interface is in English and Arabic, study material in English.
Cookies & Local StoragePrivacy PolicyAccessibility Statement
Privacy §3l: in a strict exam the teacher now sees the email of the account behind each name, shortened (like ah***@gmail.com). A student's exam name belongs to their account: typed once and checked, or picked from a name list the teacher gave, then used in later exams; only the teacher can change it. A teacher may read a name list from a photo of a register; the photo and its text are not kept.
Privacy §9: students can now sit a teacher's strict exam in ZAPP (Android and iPhone). The app sends the same things as the website's exam room (section 3l) and records fewer flags — leaving the app and for how long, a copy attempt, going offline — with a random id for the app installation in place of the browser's.
Strict exams (Privacy §3l and the retention table, Terms §4, AI Policy, the new `zak-exam-device` row of the Cookies notice). A teacher can set a built paper as a strict exam that only signed-in students can sit: one attempt on one device, a clock kept by our server, no mark scheme and no AskZ. Unlike a class link, it keeps each student's answers on the AskZ server so they can be marked — AskZ marks each answered part against the official scheme (paid from the teacher's allowance) and the teacher checks and releases the final marks. The room also records flags for the teacher (time away from the exam tab, leaving full screen, paste, copy or print attempts, a second device, a network change, or a lost connection — the kind, time and length only; time lost to a crash or restart is given back only if the teacher chooses); no camera, microphone, screen or keystrokes are ever collected. Only that teacher and ZAK see answers, marks and flags; everything is deleted 12 months after the exam's last activity, or with either account.
Privacy PolicyTerms of UseCookies & Local StorageAskZ & AI Transparency
XP is now worked out on our server from what you did (topics, quiz rounds, marked questions, flashcards, programs, practice and games), at most 600 XP a day, instead of being counted on your device and checked afterwards. When you are signed in and AskZ marks a question, the server keeps the marks it gave each part with a short fingerprint of the answer (not the answer) for 400 days, so only marks AskZ really gave earn AskZ-rate XP; they are deleted with your account. Your streak is the days in a row your account saved progress.
Added “How am I doing?” (Privacy §3c, §9, Cookies): once a day your browser or the app can send the week, your level, five rounded ranges about your own week (days studied, quiz accuracy, past-paper questions, study-route sections passed, share of topics completed) and a weekly key made on your device, so everyone on a level sees an anonymous chart and where they stand. No account, name, answer, IP address or user agent is stored; charts are deleted after 8 weeks; it is on by default and Turn off (or Global Privacy Control) stops it. The switch and what was last sent stay in your browser under `zak-compare`.
Added `zak-route` to the storage table: the study route remembers, in your browser, the pace you chose, the day you started and the sections you skipped. Your checks and chapter tests are saved with the rest of your progress (and synced if you are signed in). Nothing new is sent anywhere.
Simpler pages. Privacy §3 now says that, when Google Analytics is allowed, it also receives a few page-use events (which part of a page was used first, a rough time bucket, which level was picked, whether Continue or a topic-page section was opened) with no typed text, names or IDs. The Cookies notice adds two device-only keys: `zak-topic-ui` (which topic-page sections you opened) and `zak-bank-ui` (whether the past-paper Filters panel is open).
Ebooks can now be listened to (Privacy §3o and the new AI voice provider row in §5, AI Policy §5, the `zak-reader` row of the Cookies notice, and the Accessibility statement). Your device's own voice reads the chapter by default, and nothing is sent anywhere. If you choose the AskZ voice, the reader asks our server for one passage at a time by its place in the book; the server checks you may read that chapter, speaks the book's own words with our AI voice provider, and keeps the audio (book text only) so the next listener hears it at once. New passages are counted per account per day. Your listening settings stay in your browser in `zak-reader`.
Privacy PolicyCookies & Local StorageAskZ & AI TransparencyAccessibility Statement
Book prices and orders. Outside Pakistan prices are in US dollars by country price level, VAT included for EU and UK buyers, printed books by international courier in 3–4 weeks with the courier charge confirmed before payment. The books pages now show prices (black and white, full colour, ebook, workbooks and sets for each level), in Pakistani rupees excluding delivery; prices may change without notice and the total the books desk confirms is final. Printed copies are printed for each order and normally delivered in 7–10 working days, free on every set within Pakistan. A basket on the site sends your order to the books desk with an order number and opens WhatsApp; no payment is taken on the site (Tuition, Success Packs & Merchandise Terms §5a). Privacy §3o says what an order keeps (name, WhatsApp number, city, address, optional email), who sees it and that contact details are erased 12 months after the order closes. New browser key: `zak-book-basket`.
Tuition, Success Packs & Merchandise TermsPrivacy PolicyCookies & Local Storage
University Planner countries now sync: when you are signed in, the countries you picked in the planner (country codes only — never your subjects or grades) are part of your synced progress. For A2 and Full A Level students the parent's Sunday email can name the next university admission date for those countries, with a link to the admissions calendar (Privacy §3l; the `zak-uni` row in the cookies table).
Added “Today's question” (Privacy §3c, Cookies): one real past-paper question a day in the Today card. Pressing Done sends only your mark, with the day, level and question reference, to count how everyone did; no account, name, answer or IP address is stored and each day's totals are deleted after 14 days. Your streak and results stay in your browser under `zak-daily-question`. ZAPP on Android, iPhone and iPad has the same question and sends the same mark (§9).
Added `zak-uni` to the storage table: the University Planner remembers the A Level subjects, grades, countries and degree types you picked, and your IBCC calculator entries, in your browser only. Nothing is sent anywhere.
Added the zak-traps storage key for Examiner's Traps: the traps you missed, your best scores and longest streak, kept on your device only.
Report a problem is now on every past-paper question card too (marked wrongly, a glitch, a flaw in the question), on the website and in ZAPP, and goes to the same reports inbox. The copyright notice now explains how open-licence photos in ZAK's books and ebooks are chosen and credited.
Privacy PolicyAskZ & AI TransparencyCopyright, Trademarks & Takedown
New §3q Sponsors: what a sponsor listing collects (shown details only with consent, private contact details, logo), how long it is kept and how to withdraw it. Cloudflare Turnstile now also guards public forms (testimonials, sponsor listings, publisher enquiries). Synced progress and the progress store now include the videos you watched or marked as watched (YouTube ids only).
ZAPP now sends Paper Builder class results like the website: a signed-in student who presses “Send my result to my teacher” in the app sends a chosen name, marks per question and part, total and time taken — never answers — and can withdraw it; guests' results stay on the phone. The app also shows the Examiner Agent's extra questions, flashcards and examiner warnings and sends the same anonymous “missed” counts (topic and kind only). Teachers' class results, class lists and the School tab remain website-only (Privacy §9).
Byte Size topic votes: signed-in students can rank up to three sub-topics they want a short online class on and choose the class language; we keep the ranking and language under the account id (and, if ticked, email you once when a topic you voted for is announced). Deleting your account deletes it.
ZAPP's Java and VB.NET Playgrounds: the apps download the website's own compiler files from cswithzak.com the first time you open each one, keep them on the phone and run your code there, offline afterwards (Privacy §9).
Examiner Agent: before a new quiz question or flashcard goes live, a second AI model from our AI decision-model provider now checks that its marked answer is right and holds back any it doubts. It sees only the new item, its topic and syllabus point — nothing about students (AI Policy, Improvements made by the Examiner Agent).
Today's examiner: when AskZ marks a written past-paper answer, the points it credited get a second reading against eight current Cambridge examiner conventions. The official mark and XP are unchanged; a point today's examiner would refuse is tagged with its reason and source paper.
Point-by-point marking: when you press “Mark my answers”, a typed answer whose mark scheme is a list of points is now marked first by a second AI provider, a decision model, which checks each mark-scheme point against your typed text (never a picture, name, email or id; nothing kept). Pen writing, drawings, code that ran and anything it cannot mark go to AskZ's language model as before. The provider does not train on what we send; our data-processing agreement with it is being finalised (Privacy §3, §5 and §6; AI Policy, AI marking).
Java and VB.NET Playgrounds: both languages now compile and run in your browser. The compilers (OpenJDK's javac with TeaVM, and Microsoft's VB.NET compiler on .NET) are downloaded from this site the first time you use them and your code never leaves the page (Privacy §3k); two more browser-storage keys keep the last Java and VB.NET program you typed (Cookies); their licences are listed (Copyright) and their Web Workers run under their own locked-down policy (Security §1).
Privacy PolicyCookies & Local StorageTerms of UseEducational DisclaimerCopyright, Trademarks & TakedownSecurity & Responsible Disclosure
Ebooks. ZAK's books can be bought in print or as an ebook — separately, through the admissions team, never on the site. The ebook is read on cswithzak.com only: an access code unlocks one book for two years on up to three devices, for the person who redeemed it; there is no download or printing, copies of short passages carry a licence line, and each page shows a faint watermark with your shortened email and licence id (Tuition, Success Packs & Merchandise Terms §5a; Privacy §3o says exactly what is stored — the licence, a hash of the code, your devices and, for books you own, your highlights and notes — and that deleting your account deletes them). Two new browser-storage keys for the reader: `zak-reader` (settings) and `zak-reader-notes:<book>` (your notes).
Tuition, Success Packs & Merchandise TermsTerms of UsePrivacy PolicyCookies & Local Storage
Examiner Agent (AI Policy §7): a topic it improved a lot is listed under What's new, and when Cambridge changes a syllabus the agent only suggests fixes to ZAK — they never go live on their own.
Examiner Agent (AI Policy §7, Privacy §3d): once a week an automatic AskZ agent adds checked quiz questions, flashcards and examiner-report warnings to the topic where students lose most marks, and simplifies hard Smart Notes sections — live without a person reading them first, with every change visible to ZAK and removable. To choose the topic it uses anonymous counts of missed quiz questions and flashcards: only the topic and the kind, no question, answer, account or id. ZAPP for Android, iPhone and iPad now shows the same extra questions, cards and warnings and sends the same anonymous topic-level counts (Privacy §9).
School licence (Terms §4, Privacy §3l): a school can agree a licence for its Computer Science department by message and pay by invoice. It gives the school's linked teachers a monthly AI allowance for the Paper Builder and a view of colleagues' class links (titles, papers and result counts only — never a student's name or result). Students are unaffected and nothing free moves behind it; when it ends, teachers keep the free tier.
Parent view: the Sunday email may end with one line naming ZAK's next dated class for the student's level (in the next 30 days) with a link to the class list. No price, and nothing from the student's answers or scores decides it (Privacy §3l).
ZAPP (Privacy §9): the Tuition screen lists upcoming classes and the Dashboard may show one dismissable class card close to your exams; “Not now” keeps a date on the phone for 30 days and nothing is sent. Joining is a WhatsApp message to the admissions team — the app sells nothing.
One more browser-storage key, “zak-class-invite”: when you press *Not now* on the “Classes with ZAK” card, it remembers for 30 days not to show it. Nothing about you is stored in it and nothing leaves your browser.
Plain words on money: “ads” and “advertising” in these documents mean third-party advertising, which we never show. We also offer our own classes and school services; buying them never changes what is free, nothing free becomes paid, and where we mention them next to your study they come after your work, can be dismissed, carry no price or countdown, never appear in games, labs, Discussion Corners or past-paper questions, and never use your data for targeting (Privacy §2, Terms summary).
Paper workspace palm rejection: one more browser-storage key, “zak-ink-pen”, remembers that a pen or stylus has been used to write on a past-paper question in this browser and whether you chose “Draw with finger too”. Nothing about it leaves your browser.
Progress sync: XP sent from a device is checked for plausibility (at most 1,500 a day per device, and an account total in keeping with its age); anything above is reduced and sent back, with nothing else about the account changed, and each correction is kept for 90 days for ZAK's admin tools. A "+tag" address now counts as the same mailbox only on providers that treat it as one (Privacy §3l).
After a full security review: sign-in codes allow five tries counted on the server, the sign-in link's code is removed from the address bar on arrival, shared Python programs run with network and storage switched off, posts and AI replies are escaped more strictly, the Content Security Policy allows only jsDelivr's Pyodide folder, and the AskZ servers send baseline security headers and check webhook signatures (Security §1).
Class lists and the parent view. Approved teachers can keep class lists: students are added by a pasted or uploaded list of names and email addresses, a join code or an import from Google Classroom, and nobody joins without pressing Accept; the teacher sees who has not sent a result yet, never a student's email or progress. A Google Classroom import uses read-only access once and keeps Google's token for at most 15 minutes, with no refresh token. Students can invite a parent or guardian to a read-only summary of their progress (study days, streak, XP, scores by topic, results sent to a teacher) and a weekly email; the parent signs in with their own email, never sees chats, answers, bookmarks or posts, and either side can end it at any time. Accounts now keep the dates they were active for the last 70 days (Privacy §3l, §5, §7, §9; Terms §4).
Added Terms §11, “Exam statistics are information only”: the Statometer, question-bank topic tags, question maps, Paper Builder weights and planner order are filed automatically and may be wrong, describe past papers rather than future ones, guarantee no mark, grade, result or admission, are not advice, give way to the examination board's own documents, are relied on at your own risk (statutory and consumer rights kept), and are not on their own a ground for a refund. Former §11–13 are now §12–14. The Child Safety & Safeguarding policy no longer says the website has no messaging between users. Section 3 now describes the Discussion Corners as they work: open corners and class corners that only teachers ZAK has approved can make, nicknames instead of names, posts anonymous to classmates but not to ZAK or the class teacher, no private messages, contact details refused, every post checked before and after it appears, warnings that lead to 10-minute, 24-hour and 7-day mutes, reports that ZAK reviews (three hide a post), blocking, what moderators can do, and chat deleted after 60 days. ZAK is now emailed straight away about a report of unsafe content or shared personal details, a third warning, and a corner post or AskZ message stopped by the self-harm check (Safeguarding §3, Privacy §3d/§3n and the Resend row in §5, Community Guidelines §6: the excerpt, the corner or conversation ID and the number of reports — never who reported it or anyone's email); email is not an emergency service, so a worry about a child's safety should still go to ZAK directly. It also covers CS Games (no chat boxes) and the public Discord servers. Privacy §8 adds the Discussion Corners to what parents should know; Terms §4 says an account also holds your corner nickname and posts, and that deleting the account deletes them; the Acceptable Use Policy covers the corners and their Report button; the Testimonials & User Content policy says how corner posts are shown and that class-corner posts are never shared; the Cookies notice no longer calls the site one with no accounts. Reporting an AI answer now happens inside the site and ZAPP: Report opens a short form (reason, optional note) whose report — the reason, the note, the AI text and where it appeared, plus your account id if you are signed in, never your email or IP address — reaches ZAK in his Studio and is deleted after 180 days (Privacy §3d/§5/§7/§9, AI Policy §8). Discussion Corners now ask you to tick “I agree to the Community Guidelines” before your first post, and we record when and which version (Privacy §3n, Community Guidelines §6). Paper Builder class links can now send results back to the teacher who made them. A signed-in student who presses “Send my result to my teacher” sends a name they choose (never their email) and their marks per question and part, total and time taken — not their answers; guests' results stay on their device. Only that teacher (while approved) and ZAK can see them; a student can withdraw theirs; results are deleted after 12 months and with either account (Privacy §3l, §5, §7; Terms §4). Teachers can also share a class link to Google Classroom through Google's own share page — nothing about them or their students is sent to Google from the site. The apps don't send class results yet (Privacy §9). Security §1 now describes the Permissions-Policy (camera, location, payment and other unused device features off; microphone only for AskZ's voice typing) and the Content Security Policy, which now blocks anything not on its list (after an afternoon in report-only mode that found one missing analytics address) and reports what it blocked, without query strings or personal details. Accessibility statement updated after a full WCAG 2.2 AA audit of every page type: red text and coloured labels now meet contrast in both themes, links inside sentences are underlined, the search palette is a proper dialog, AskZ's drawer moves focus in and out, tab strips work with the arrow keys, the code editors can be left with Escape then Tab, wide tables and diagrams can be scrolled with the keyboard, the top bar fits a 320 px screen, reduced motion now also stops sliding panels, and small targets were enlarged. §2 says how we test; §3 adds the two things still below the contrast ratio (white labels on red buttons, a few coloured statistics). Cambridge material is credited the same way everywhere: each past-paper question, mark scheme and examiner comment on the site, in ZAPP and in downloads names its paper with “© Cambridge University Press & Assessment”; AskZ adds the same line when it quotes one; copied question text carries it; and our community posts link to the mark scheme and examiner's comments on the site instead of copying them (section 2). Added `zak-today` to the storage table: the “Today” card on the dashboard (and on the home page once you have used the site) remembers the day's topic and the tasks you ticked in your browser. It is worked out on your device and not sent anywhere.
Terms of UseChild Safety & SafeguardingPrivacy PolicyCommunity GuidelinesAcceptable Use PolicyTestimonials & User ContentCookies & Local StorageAskZ & AI TransparencySecurity & Responsible DisclosureAccessibility StatementCopyright, Trademarks & Takedown
AskZ on Discord can now read an image you add to /askz (or the images on a message you choose with “Ask Z about this”): it is downloaded from Discord, read once into text by our AI model provider and never stored; the daily image allowance is counted against a one-way hash of your Discord user ID (section 3d and the providers table).
Added Discussion Corners (/corners): students post under a nickname they choose (never their email), can post anonymously to classmates (ZAK and the class teacher still see who), and have no private messages; posts with contact details are refused; every post is checked by the safety filter and OpenAI moderation; reports go to ZAK; anyone can block anyone. Privacy §3n says what is stored and for how long (chat 60 days, threads while the corner exists, reports and logs 180 days) and how @AskZ in a thread uses the thread's messages and the asker's daily allowance; §7 lists the retention rows. The Community Guidelines now cover the corners (§1 and new §6: nicknames, anonymity, strikes, reports, blocking, class corners). Privacy §9 says the ZAPP apps have the same corners, built in.
Brought every document in line with today's releases. Guests' photo uploads to AskZ on the website first pass Cloudflare Turnstile, an automatic bot check loaded only at that moment (Privacy §3d/§5, Cookies §3, Security §1, AI Policy §5, Terms §5). Questions that were never printed — AskZ-written, model and assignment questions — are answered on a typeset paper, kept and synced like past-paper work, and marked by AskZ from your typed answers only when you ask; a question inside a built paper or timed sitting keeps its own copy, and AI marking now counts against a signed-in student's own daily share (Privacy §3e/§9, Cookies §2, Terms §4, AI Policy §7). One mailbox is one account (Privacy §3l, Terms §4). A teacher's reasons and note for changing a paper are read by AskZ (never their name or email) to plan and rewrite questions, and that feedback is kept until ZAK deletes it or the teacher deletes their account (Privacy §3l/§5/§7, Terms §4, AI Policy §7); ZAK can have AskZ rewrite an off-topic AskZ-written question and re-files misfiled past-paper questions by hand (AI Policy §7). Resend's and the AI provider's roles are listed in full (Privacy §5); the Studio's admin login is described (Privacy §11, Security §1). Copyright §2 covers Paper Builder downloads; the Accessibility statement adds the Help panel (WCAG 2.2 Consistent Help, the ? key), AskZ's focus mode and read-aloud, and the paper workspace's Text view. Terms and Privacy now name the iPhone and iPad apps alongside Android, and the Acceptable Use Policy forbids getting round bot checks or AskZ's daily allowances (for example with several email addresses).
Privacy PolicyCookies & Local StorageTerms of UseAskZ & AI TransparencyCopyright, Trademarks & TakedownAccessibility StatementSecurity & Responsible DisclosureAcceptable Use Policy
New Help Centre and site tour: one more browser-storage key, “zak-help”, remembers that you answered the one-time “New here? Take the tour” prompt. Nothing about it leaves your browser.
AskZ can now read photos and documents you add to a chat — PDFs (typed or scanned), Word, PowerPoint, Excel, OpenDocument, notebooks, web pages, RTF, CSV, code and text. A photo, and a document's scanned pages or pictures, are read into text once by our AI model provider; a document's own text is pulled out without any model. The photo or file itself is not stored; its text (and, for a long document, numeric fingerprints of its passages used to find the parts you ask about) is deleted after 24 hours. Voice typing and read-aloud use your own browser's or phone's speech features — we never receive audio. The daily allowance now also counts uploads and each student's share of the day's AI budget (AI marking has its own share); its counters hold numbers only and are deleted after 40 days (Privacy §3d, §5, §7, §9; AI Policy §5).
Paper Builder: when an approved teacher changes a built paper, the reasons they give (ticked reasons, an optional note, the questions they picked) are kept with their name and email so ZAK can see what AskZ got wrong; only ZAK reads them. The changed paper is stored as a numbered version with no personal data, so a class link shows the changed paper (Privacy §3l).
The Paper Builder is now for teachers. A teacher signed in with a school or institution email can request access; we keep the request (name, role, school, location, levels taught, an optional note), its status and the messages about it with the account, ZAK decides each one himself, and decisions are emailed (Privacy §3l, §3e and §7; Terms §4). Students can still sit a paper from a link their teacher shares. Delete my account removes the request.
AskZ daily allowance in exam seasons: from the start of the month before a Cambridge series' first Computer Science paper until its last one, chat allows 20 messages a day on each internet connection (60 with a free account) instead of 10 (25). The numbers may change with costs and demand; the current ones are shown when you reach them.
AskZ daily allowance: chat is free up to 10 messages a day on each internet connection, or 25 a day with a free account; when AskZ's free budget for the day is used up it rests until the next day. To count messages the Worker keeps a two-day counter under your account, or under a one-way hash of your network's IP address and the date (the address itself is not stored).
Past-paper code answers (website, and ZAPP from its next update — Privacy §9): parts that ask for pseudocode, Python, SQL, assembly or Prolog get a code lab under the paper, and “complete the pseudocode” parts can be run as the whole program. Your code runs on your device; when you press “Mark my answers”, AskZ is also told what happened when it last ran (errors and output) as evidence for the marking (Privacy §3 and §9, AI Policy).
Past-paper marking (website, and ZAPP from its next update — Privacy §9): “Mark my answers” now asks AskZ to mark every written answer (and any drawing the site can't read exactly) against the official mark scheme in one go, for meaning rather than exact wording — so pressing it sends those parts' typed answers and a picture of each part to AskZ, used for that request only and not stored. The plain-text view gains “Mark with AskZ” (your typed answer only, no picture). Privacy §3, AI Transparency §7.
ZAPP (Android and iOS) now syncs past-paper work for signed-in students, exactly as the website does: what you write on past-paper questions in the app is kept with your account and shows on your other devices and on cswithzak.com (Privacy §3l and §9). Same limits (256 KB per question, 5 MB / 2,000 questions per account); signing out keeps it on the phone; Delete my account removes the account's copy.
Past-paper questions: timed sittings (results by topic, command word and AO) and the “My answers” PDF are made in your browser and not sent to us; bookmarked questions sync as part of the bookmarks list (Privacy §3). Copyright §2 says how the paper workspace uses Cambridge's papers: one question at a time from Cambridge's own PDFs, never a mirror-stamped copy, no clean-page downloads, and a student's answered PDF only ever contains their own work with the Cambridge © line on every page.
Signed-in students’ past-paper work now syncs: what you write on past-paper questions in the paper workspace is kept with your account so every browser you sign in on shows it (Privacy §3 and §3l, Terms §4). The newest copy of each question wins and clearing a question clears it everywhere; each question is capped at 256 KB and the account at 5 MB / 2,000 questions (the questions changed longest ago leave the account copy first, never your device). Delete my account erases it. The retention table (Privacy §7) now lists the account, and the cookies notice’s `zak-paper-work` and `cswithzak-account` rows say what is synced. ZAPP does not sync past-paper work yet (Privacy §9).
Privacy §9: ZAPP (Android and iOS) can open past-paper questions as the real paper you write on, as on the website. Your answers, ink and marks stay in the app's private storage; the page images are downloaded from cswithzak.com and kept on the phone; a picture of one question part is sent to AskZ only when you ask it to estimate a drawing's mark, and is not stored.
Past-paper workspace: what you write and draw on past-paper questions stays in your browser (new `zak-paper-work` row in the cookies policy). Drawn answers are marked on your device where possible; for drawings it can't read, you can ask AskZ for a marking estimate, which sends a picture of that question part and its mark scheme for that one mark and is not stored (Privacy §3, AI Policy §7).
Cookies notice: the `cswithzak-progress` row lists Full A Level (AS and A2 together) as a fourth value of your chosen level.
Cookies notice: the `zak-askz-history` row now lists the AskZ settings kept with your chats (including the new S–XL text size), and a note explains the one-off `Clear-Site-Data: "cache"` header sent to browsers that still hold our pre-September old website, which empties only the cache, never your progress (that header was withdrawn again on 25 September 2026). Accessibility §2 describes AskZ's text-size control, labelled code Copy buttons and the apps' no-auto-scroll reading.
AskZ chats are now saved on your own device so you can search, reopen, pin, rename, download and delete them (Privacy §3d and §9, new `zak-askz-history` row in the cookies policy). Nothing is uploaded; history can be turned off or auto-deleted after 7, 30 or 90 days.
Added CS Games (/games) and the AskZ Gaming Discord server (quiz questions, room invites and leaderboards through Discord commands — Privacy §3d/§3m/§5, Community Guidelines §1): thirteen syllabus games played solo in the browser or online through our AskZ server, with a random player id and a generated nickname instead of an account, preset quick-chat lines instead of chat boxes, AskZ practice bots always labelled BOT, and leaderboards that re-check every run. Privacy §3m says what the server receives and how long rooms (until they close) and leaderboards (daily and weekly boards 35 days) keep it; the Cookies notice lists the `zak-games` key; the Acceptable Use Policy adds game cheating and disrupting rooms; the Accessibility statement notes which games need sight and quick reactions; Privacy §7/§8 list how long rooms, leaderboards and Discord trivia answers are kept and that games have no chat boxes; the AI notice §7 explains that game opponents are labelled bots, not a language model. ZAPP opens the same game pages in an in-app web view (Privacy §9).
Privacy PolicyCookies & Local StorageAcceptable Use PolicyAccessibility StatementCommunity GuidelinesAskZ & AI Transparency
Privacy §9: the ZAPP Pomodoro timer can now show one notification when a focus block or break ends (the notification permission is asked the first time you start it; the end time stays on the phone), and the section says that asking AskZ to write Smart Notes or Paper Builder questions from the app sends only the topic outline or paper settings, as on the website, and that downloads (PDF, PowerPoint, Word, calendar, diagram images) are built on the phone and handed to the share sheet or clipboard.
Privacy §9 describes ZAPP's new Community screen and blog strip: public follower counts come from the AskZ server with nothing about you, blog cover pictures load from Blogger's image server, and posts open in an in-app browser tab.
Privacy §9: ZAPP (Android and iOS) now has optional usage analytics under the website's rules — opt-in in the EU/EEA, UK and Switzerland, opt-out elsewhere, Settings → Privacy turns it off. Only screen names, a random analytics ID, the app version and platform are sent, relayed through cswithzak.com so Google never receives your IP address.
Privacy §9 now also covers ZAPP for iPhone and iPad: Snap uses the in-app camera screen or the photo picker and reads text on the device with Apple's Vision (no photo is saved or uploaded), voice input uses Apple's speech recognition (on the device where supported, otherwise Apple's servers), the sign-in token lives in the Keychain, and each permission is asked the first time you use its feature. Privacy §5 adds Apple (App Store, speech recognition) to the providers table.
Rewrote Privacy §9 as the actual privacy notice of the ZAPP Android app instead of a pre-launch placeholder. It no longer says Snap photos are sent to our server (text is read on the phone and no image is uploaded), that you can sign in with Apple or Google (sign-in is by emailed code only), that crash reporting may be on (there is none), or that voice audio may go to a transcription provider (the phone's own speech app handles it; ZAPP has no microphone or camera permission). It now also covers content downloads, the random install identifier used for per-device XP, how the sign-in token is stored, Android backup, text shared into the app (placed in the message box, never sent without a tap) and the Report button on AI answers. Privacy §5 names Google Play and Play services; there is no iOS app. Terms §4 replaces “no accounts” with the terms of the optional account (email-code sign-in, 180-day sign-ins, how devices are combined, deletion, age). AI Transparency §1 and §8 describe the AI labels and the Report option in the app.
Corrected the hosting provider: the website itself now runs on Cloudflare Workers, not Vercel. Privacy §3b (server logs), §5 (the provider table is now a single Cloudflare row covering both the site and AskZ), §6 (international transfers) and §7 (log retention) and Security §1 name Cloudflare only. Security §1 also no longer says the website has no user accounts — optional passwordless sign-in has been available since 17 September 2026; there is still no password database, because sign-in uses a one-time emailed code. Also: the Paper Builder’s AI-written questions are now described in AI Transparency §7 and Privacy §3f — they carry a “written by AskZ” badge, are not checked by a person before they appear, and are not Cambridge questions or predictions; BestExamHelp is named alongside PapaCambridge everywhere the past-paper hosts are listed, because a few sessions’ PDFs are linked from it; and the Cookies notice adds the `zak-exam-zoom` key (the text size you choose in the question bank).
Privacy PolicySecurity & Responsible DisclosureCookies & Local StorageAskZ & AI TransparencyTerms of UseEducational DisclaimerCopyright, Trademarks & TakedownAccessibility Statement
Added the AI-narrated page-overview videos (Home, the three course pages, Tools, AskZ, Tuition, About): generated with Google's NotebookLM from each page's own content, published on ZAK's YouTube channel and played in a click-to-play window on the page — AI Policy §7, Copyright §1 and §3, Privacy §5 (the YouTube thumbnail now loads on those pages as well), Accessibility §2.
AskZ & AI TransparencyCopyright, Trademarks & TakedownPrivacy PolicyAccessibility Statement
Added the footer site-visits counter (a session-storage flag `zak-visit`; the server keeps only counts — Privacy §3c, Cookies §2). Analytics now follows local law: in the EU/EEA, UK and Switzerland Google Analytics is opt-in (off until you press “Allow analytics” on the banner); elsewhere it is on by default with the footer opt-out. The country is read from the request once and never stored. Privacy §3 and the Cookies notice §3–4 describe the two regimes. Also: the Statometer (topic and sub-topic exam statistics computed from the question bank) is described as an estimate, not a prediction (Disclaimer §5, AI Transparency §7); the Facebook study groups now use membership questions and post approval, with daily posts assembled from the site's checked material and replies that AskZ may draft but ZAK approves one by one (Community Guidelines §4, AI Transparency §7).
Privacy PolicyCookies & Local StorageSecurity & Responsible DisclosureEducational DisclaimerAskZ & AI TransparencyCommunity Guidelines
Added optional student accounts (email code sign-in, progress synced through the AskZ Worker, delete-my-account — Privacy §3l), Google Analytics switched to on-by-default with a one-click opt-out and Global Privacy Control honoured, site-wide search (a “recent picks” key), AskZ Smart Notes and ZAK Assignments (written by AI once per topic, not reviewed line by line, cached in your browser), the video library, the Python, SQL, assembler and Prolog labs and thirteen more browser labs (Flowchart Studio, Translator, Programming Tasks, Data Structures, Algorithms, Data, Networks, Database Designer, Compiler, Systems, OOP, Testing, Mock Paper) with their browser-storage keys, the jsDelivr CDN that serves the Python runtime, examiner comments in the question bank, and updated licences, accessibility notes and security scope.
Terms of UsePrivacy PolicyCookies & Local StorageEducational DisclaimerAskZ & AI TransparencyAcceptable Use PolicyCopyright, Trademarks & TakedownAccessibility StatementSecurity & Responsible Disclosure
First publication of all thirteen documents.
Terms of UsePrivacy PolicyCookies & Local StorageEducational DisclaimerAskZ & AI TransparencyAcceptable Use PolicyCopyright, Trademarks & TakedownTestimonials & User ContentTuition, Success Packs & Merchandise TermsChild Safety & SafeguardingCommunity GuidelinesAccessibility StatementSecurity & Responsible Disclosure
The essentials
The agreements that apply to everyone who opens the site.
Terms of Use
The agreement between you and CS with ZAK when you use the website, the tools, AskZ and ZAPP.
Read
Privacy Policy
What information the site, AskZ and ZAPP handle, where it goes, how long it stays, and your rights over it.
Read
Cookies & Local Storage
Exactly which cookies and browser-storage keys the site uses, what each one is for, and how to control them.
Read
Educational Disclaimer
What this site is (a teacher's free resources) and is not (Cambridge, your exam centre, or a guarantee of grades).
Read
AI, content & copyright
How AskZ works, whose material is whose, and how to get something taken down.
AskZ & AI Transparency
You are talking to an AI. What AskZ is, how it answers, what it does with your messages, and its limits.
Read
Acceptable Use Policy
What you may not do with the site, the tools, AskZ or our community spaces — and what happens if you do.
Read
Copyright, Trademarks & Takedown
Who owns what on the site, how Cambridge material is acknowledged, and how rights-holders get something removed.
Read
Testimonials & User Content
What happens when you send us a testimonial, correction, question or anything else — and how to withdraw it.
Read
Tuition & paid services
Classes, Success Packs, ZAKATHON, merchandise — and how we look after students.
Tuition, Success Packs & Merchandise Terms
Enrolment, fees, cancellations and refunds for classes, ZAKATHON, Success Packs, books and merchandise.
Read
Child Safety & Safeguarding
How ZAK and the centres keep students safe in class, online and in groups — and what to do if you are worried.
Read
Community & trust
Group rules, accessibility, security and how to reach us about any of it.
Community Guidelines
House rules for the Discussion Corners on this site, ZAK's Facebook groups and pages, the Discord server, class WhatsApp groups, YouTube comments and ZAKATHON.
Read
Accessibility Statement
Our commitment to WCAG 2.2 AA, what works today, what doesn't yet, and how to tell us about a barrier.
Read
Security & Responsible Disclosure
How the site is protected, and how to report a vulnerability safely (and be thanked for it).
Read
Requests and complaints
- Privacy request (access, delete, correct) — email with “Privacy request” in the subject. 30-day response.
- Takedown (copyright/trademark) — “Takedown” in the subject. Acted on within 3 working days.
- Security — “Security” in the subject, or see security.txt. 3-working-day acknowledgement.
- Safeguarding — “Safeguarding” in the subject, or WhatsApp +92-3-111-222-ZAK. Same-day for a child at risk.
- Accessibility — “Accessibility” in the subject. 5 working days.
- Refunds & tuition — “Refund” in the subject; your centre or the admissions team first.
Operated by Zafar Ali Khan, Karachi, Pakistan · contact@cswithzak.com · +92-3-111-222-ZAK
