Security

Last updated: 18 September 2026

ZooNumeria holds information about children, so keeping it safe comes first. In short (schools: see also the one-page data summary):

Signing in

• No passwords: a six-digit code is emailed each time. A code works once, expires after 10 minutes, and is destroyed after five wrong tries.
• The teacher area on a shared tablet is locked with a PIN and locks itself after 15 minutes unused, or when a check is started.
• A teacher can see every device signed in, sign any of them out, and order a lost tablet to clear children's work.

Storing information

• Email addresses, pupil details and every answer are encrypted on the server (AES-256).
• On a tablet, saved answers and the class list are encrypted too, and removed when the tablet is cleared.
• Only what is needed is kept: no full names, dates of birth or health information.

Connections

• All traffic uses HTTPS. The sign-in cookie cannot be read by page scripts and is never sent to other sites.
• Requests are limited, so guessing codes or PINs is slowed right down.

Reporting a problem

If you think you have found a security problem, please email our contact address with the details. Please do not test it on real accounts or share it publicly until we have fixed it. We will reply as soon as we can.