Privacy

Last updated 26 October 2026

What we do not collect

• School results. The results you enter in My Matric Map stay in your browser tab and disappear when you close it. They are never sent to us, except inside your plan's PDF when you choose to email it to yourself (see below). If you tick "Remember them", they are saved in that browser only, and "Clear" deletes them.
• The rest of your plan. The name, subject notes, home area, shortlist and checklist ticks in My Matric Map stay in your browser. Only the grade and the degrees chosen are sent to us, and only when you are signed up (see below). Printed copies are shared only when you choose to share them. Bursaries you save on the Bursaries page stay in your browser too, unless you ask for email reminders (see below).
• Emailing your plan to yourself. When you are signed in, "Email it to me" sends your plan's PDF, which includes what the plan shows (such as your results and choices), through our server and Resend to your account's own email address only. We do not keep a copy.
• Family details. The second-passport checker remembers only which countries you ticked, in your browser.
• Maths predictor marks. The marks entered in the Maths predictor stay in your browser: they are saved in that browser only, with the goal mark, the question or paper last open, the questions skipped and the section chosen, and "Clear all marks" deletes them.
• Where you live. In step 1 of My Matric Map we guess your area from your internet address, so we can ask whether you live near a particular city. The guess is made by our own code, on the Cloudflare network that runs our sign-up service, with a table of South African address ranges (IP Geolocation by DB-IP), so no other company is asked about your address. We do not store the address or the guess. The area you confirm, or choose yourself, is kept with your plan in your browser and is never sent to us.
• We do not run advertising trackers, except the Google ad measurement described under Google ads, and we do not sell or share personal information.

What we do collect

• My Matric Map sign-ups: the email address you sign up with, the date, the grade and the degrees chosen in the plan (updated when they change), and whether you asked for emails about talks and sessions for those careers. We use them to send your access code, to see which careers learners are interested in, and, only if you ticked that box, to email you about sessions for those careers. We never pass the address to anyone else.
• Access codes: we keep only a scrambled form of your code, so we cannot read it back. Asking for a new code replaces the old one.
• Sign in with Google: if you choose it, Google tells us your email address and a number that identifies your Google account, which we keep so that you can sign in again. We do not receive your Google password or anything else from your Google account.
• Paid plans: if you buy a Family, Group or School plan, Lemon Squeezy takes the payment and tells us your email address, the plan and the order number (for plans bought before 5 October 2026, Gumroad does). We keep them with the plan's dates, its join code and its number of places, the subscription's status and renewal date, and the brand and last four digits of the card (never the full card number), and we keep the email address of each person who joins the plan. The buyer sees each member's email address, when they joined and when they last used MatricMap, so they can manage the plan's places; joining says so. If the buyer invites people by email, we keep those addresses until they join or the invite is cancelled, and send each one an invite email. A member who has not used MatricMap for a year leaves the plan automatically. We use these only to give and renew access, to run the plan and to handle refunds.
• Earlier access records: if an account had paid or full access before October 2026, we keep the date that access ends and a short note.
• Earlier requests: if you asked us before October 2026 to contact you about My Matric Map or a school licence, we keep that email address, the school's name if you gave it, and the date.
• Cookies: one essential cookie that keeps you signed in to My Matric Map on that device for up to a year. It contains a random code, not personal information. There are no advertising cookies, except Google's if you allow them after arriving from one of our Google ads (see Google ads). The analytics below also use your browser's storage for a date and, while a tab is open, where the visit started and which steps it reached (see Site analytics). The rating question keeps in your browser's local storage that you answered it, or, after "Not now", when to show it again (14 days later), and each "I would be interested" box remembers there that you ticked it. The site also keeps there whether you folded the side rail on My dashboard, and a count of your visits to My dashboard in that browser (the rating question appears from the second visit). These are on/off flags, dates and a count, not identifiers. Owner test browsers also use a one-year exclusion cookie, which stays after logout and contains only an on/off flag.
• Feedback: what you write in the feedback box, the page you wrote it from, who you said you are (a learner, a parent or guardian, a teacher or someone else) and, only if you give it, your email address so that we can reply. We use it to improve MatricMap.
• "I would be interested" boxes: if you tick one (for example, for a course on competitive careers), we count the tick without your name. If you are signed in, we also keep your email address, the topic and the date, to tell you if it happens. Untick it to take your name off.
• Bursary reminders: if you are signed in and save a bursary on the Bursaries page, we keep your email address, which bursaries you saved and when, and which reminders we have sent, so that we can email you when a bursary opens (or, after its last round has closed, when its next round may open) and a week before it closes. Every reminder has a link that stops them all, and unsaving a bursary stops its reminders.
• Study abroad interest: if you ask us to tell you when Study abroad opens, we keep your email address, the countries you ticked and the date, and use them only for that.
• MatricMap Predictor interest: if you ask us to tell you when MatricMap Predictor opens, we keep your email address, who you said is signing up (a parent or guardian, or a high school learner), the learner's grade, the kind of site your visit came from (such as Facebook) and the date, and use them only for that. We also count, without names or cookies, views of the Predictor page, active time on it (whether it reached 10 seconds, 30 seconds, 1 minute and 3 minutes), how far down it was scrolled, plays of its video, the questions opened and taps on its buttons, by day and the kind of site the visit came from, and where taps land on it for a heatmap, as for the rest of the site (see Site analytics). On the Maths predictor we count in the same way its page views, whether practice was started, a memo shown, a question skipped or a section chosen, whether a first sub-question, ten sub-questions and a whole paper were marked and the level was found, question papers and memos opened and goal marks set, never the marks themselves.
• Ratings: if you answer the short rating question under a finished map ("How would you rate MatricMap?") or in My dashboard ("How helpful is My dashboard?"), we keep the rating (1 to 5), any comment you add, the date, where it was asked and where your visit started (such as Google or a school's link). It is not linked to your account. We use it to improve MatricMap.
• Demo bookings: when you book a demo of Group or School, Google Calendar keeps the name, email address and school or organisation you enter, with the time you booked, in our calendar. Until 8 October 2026 demos were requested through a form instead; we keep those requests (name, school or organisation, email address, phone number if given, and message). We use them only to reply and set up the demo.
• Email you send us, so that we can reply.
• Server logs: like every website, our hosting providers keep short-lived technical logs (such as IP address and pages requested) for security.

Site analytics

We count how MatricMap is used, as daily totals, so we can improve it. No advertising or outside analytics service is involved. We never record marks, saved plan choices, access codes, what you type, search words or full page addresses.

• Pages and tools: page groups and public degree, university and country guides viewed; interactions with tools; homepage Explore Tools clicks, which of the homepage's doors (such as Bursaries and costs) was opened, which coming-soon tool on the Tools page was tapped (such as Universities abroad), and demo plays and finishes; Buy and Book a demo clicks on Pricing, once per visit, with the plan type; maps displayed, PDFs prepared (and PDFs that could not be made), downloads, shares, PDFs emailed to yourself (and failed attempts), messages to a parent opened by email or WhatsApp, and print dialogs; and sign-up request errors (never error messages, document contents or recipients); and, on the Bursaries page, how often each bursary's official page was opened and how often it was saved (which bursary, never who). We count broad screen sizes (phone, tablet or computer) and the kind of site you came from, such as Google or Facebook, or that you came from a Google ad or a Facebook, Instagram, TikTok or Bing link (seen from a marker in the address, which is not stored) or from an app's built-in browser such as Instagram's (seen from the browser's name, which is not stored), not full referring addresses. When none of these shows where you came from, we count whether this browser was counted on an earlier visit, using the date it keeps for daily visitor counts.
• Visits and journeys: a visit is one browser tab. While the tab is open, your browser remembers in its session storage, which is cleared when the tab closes, where the visit started and which steps it reached (such as the Tools page, a My Matric Map step or Pricing), so each step counts once per visit. To count visitors each day, your browser keeps in its local storage the date it was last counted. This is a date, not an identifier.
• Campaign links: links we share with a school or group may end in a short code (?c=…). Visits, sign-ups and payments are counted under that code. Only codes we made are kept, and the code is removed from the address once read.
• Sign-ups and payments by source: when a new account signs up, or a plan is bought, our server adds one to a count for where the visit started (for example Google, or a campaign link). The count is not linked to the account. For payments, this label goes with the checkout to Lemon Squeezy and comes back with the order.
• Search: which result was opened from the site search, and how many searches found nothing.
• Heatmaps: where taps and clicks land on each page, on a coarse grid (a twentieth of the screen width by 50 pixels), and how far down each page people scroll, as daily totals per page and screen size. Never what was tapped or typed.
• Time on pages: active viewing time, pausing for hidden or unfocused tabs and after a minute without interaction (except visible demo playback). A random token exists only for each page or public guide visit, so that time updates replace earlier totals. It is held in memory, never saved in your browser, and never linked to an account, device or other visits.
• Problems: pages and files that could not be found (with the address when it is one of ours), errors in our own scripts (the file name only, never the message), and requests our server could not complete.
• Signed-in accounts: when you view pages while signed in, we keep the date and a protected identifier derived from your account with a secret key. This counts the same account once across devices, and how many different days accounts come back, without attaching your page or tool history to it. It is pseudonymous account data, not anonymous data.

We do not identify logged-out visitors or match people by IP address. Browser Do Not Track and Global Privacy Control signals turn this counting off; a plan bought from such a browser is still recorded as a payment, without a source. Owner test browsers use an exclusion cookie. Daily records, timing records and account-presence records are kept for 90 days and then removed by our hourly cleanup. Monthly totals by page and source, which hold none of the identifiers above, are kept so that one year can be compared with the next. We also see sign-up and recorded plan-payment totals from the account and payment records.

Google ads

We advertise MatricMap on Google Search. Only if you arrive by clicking one of those ads do we ask whether Google may set a cookie to measure it; nobody else is asked, and Google's script does not load until you choose "Allow".

• If you allow it: Google's tag loads on MatricMap pages in that browser and sets its ad cookies (such as _gcl_aw), which hold the ad click. When you sign up or buy a plan, we tell Google that the ad led to a sign-up or a purchase, so we can see which ads help. We send Google no email address, results or plan details. Ad personalisation is switched off. Google handles this data under its privacy policy.
• Your choice is kept in your browser's local storage for 180 days. Until you choose, the ad click code from the link stays only in that tab's session storage, so it is not lost when you move to another page. If you choose "No thanks", nothing loads. Do Not Track and Global Privacy Control signals also keep it off.
• Changing your mind: Turn off Google ad measurement stops it in this browser and deletes Google's ad cookies on this site.

Who helps us

Cloudflare hosts and delivers the site and runs our sign-up service and its database, which holds the sign-ups, plans, feedback and analytics described above in Cloudflare's European data centres. Google Workspace hosts our email. Resend sends the access code emails, the plans you email to yourself and bursary reminders. Each processes data on our behalf. If you choose Sign in with Google, Google handles that sign-in under its privacy policy. Demo bookings are made through Google Calendar, under the same policy. Google Ads measures our ads only for visitors who allow it (see Google ads). Lemon Squeezy takes payments for paid plans as the seller of record: it receives your payment details directly, we never see them, and it keeps its own payment records under its privacy policy. Plans bought before 5 October 2026 were paid through Gumroad, which does the same under its privacy policy.

Children

Anyone can use the tools, the Example Maps and all of My Matric Map without giving us anything. The sign-up for My dashboard is for adults: a parent or guardian signs up for a learner under 18, with their own email address. If you are under 18, please ask a parent or guardian to sign up.

How long we keep it

Sign-ups, feedback, demo requests, Study abroad and MatricMap Predictor interest and earlier requests are kept until you ask us to remove them, or until we stop the service. An "I would be interested" tick kept with your email address is kept until you untick it or ask us to remove it. Bursary reminders are kept until you stop them, unsave the bursary or ask us to remove them, and are deleted a year after the last reminder we sent. Paid plan records are kept for up to 12 months after the plan ends, and then deleted. Ratings are kept for 12 months. Earlier access records are kept for up to 12 months after the access ends, and then deleted. Sessions expire automatically.

Leaving

Every email we send says how to be removed. You can also write to info@matricmap.co.za at any time and we will delete your address and what is kept with it within a few days.

Your rights

Under South Africa's POPIA and Europe's GDPR you can ask what we hold about you, have it corrected or deleted, and object to how it is used. Write to info@matricmap.co.za and we will act within 30 days. You may also complain to the Information Regulator (South Africa) or your local data protection authority.

Questions about this page: info@matricmap.co.za