X Tables / Times Table Treasure
Last updated: 19 September 2026
X Tables, including the Times Table Treasure learning game, is owned and operated by ZypherLock LLC. We are committed to protecting the privacy of parents, guardians and children who use our service.
ZypherLock LLC is registered with the Information Commissioner's Office. ICO registration reference: ZB973673.
This policy applies to:
Where a child uses X Tables, the parent or guardian is responsible for supervising that use and managing the child's profile.
We only collect information needed to operate, secure and improve the service.
We do not store plain-text passwords.
We do not ask children for email addresses, phone numbers, postal addresses, school names, precise location, photographs, or direct messaging details.
We do not sell personal data.
We use parent account details and child profile information where necessary to provide the X Tables service requested by the parent or guardian.
We may use limited technical, security and usage information to protect the service, prevent fraud, maintain performance, improve features and keep accurate records.
We rely on consent where we ask for optional choices, such as marketing emails or optional analytics cookies.
We may use or retain information where required for legal, tax, accounting, regulatory or dispute-resolution purposes.
X Tables is designed with children's privacy in mind. Children use parent-managed profiles, and we aim to collect the minimum child information needed to provide the learning game and track educational progress.
We do not knowingly invite children to create independent accounts or submit personal contact details. If we become aware that a child has provided personal contact details directly, we will take reasonable steps to delete or restrict that information.
Parents and guardians can contact us to ask about a child profile, request correction, request deletion, or ask for account data to be reviewed.
We may send parents or guardians important account emails, including email verification messages, password reset messages, security alerts, service updates, billing or subscription notices where applicable, and responses to support enquiries.
These are service-related messages and may be necessary to operate the account. Marketing or product update emails are optional. Parents can change email preferences or unsubscribe from optional marketing messages.
We do not send marketing emails to children.
X Tables uses cookies and similar browser storage to keep the site secure and functional.
Essential cookies may be used for login sessions, account security, CSRF protection, parent and child mode, gameplay sessions, progress saving, payment checkout flow where enabled, and remembering cookie preferences.
If accepted, optional first-party analytics uses random identifiers to measure page journeys, active time, approximate country, referral and campaign source, device and browser family, trial choices and key conversion steps. Analytics records do not store raw IP addresses, children's names or answers entered during play.
You can decline optional analytics and still use the learning game. For more detail or to change your choice, please see our Cookie Policy.
We may share limited information with trusted suppliers who help us operate the service, such as website hosting providers, email delivery services, payment processors where paid plans are enabled, analytics or error-monitoring providers if enabled, and professional advisers where necessary.
Suppliers are only allowed to use information for the purpose of providing services to us. We do not sell personal data. We do not allow third-party advertising networks to profile children through the core learning game.
If paid plans are enabled, payment information may be processed by a third-party payment provider. We do not intend to store full card details on X Tables servers.
The payment provider may process payment information under its own privacy terms. Parents should review the payment provider's terms during checkout.
We may store limited billing-related information, such as subscription status, plan type, renewal status, payment reference, invoices or receipts where needed for account management, support, accounting and legal obligations.
ZypherLock LLC is a US-based operator. Some service providers or systems may process information outside the United Kingdom.
Where personal information is transferred internationally, we will take reasonable steps to ensure appropriate safeguards are used, such as contractual protections, recognised transfer mechanisms, or service providers with suitable data protection commitments.
We use reasonable technical and organisational measures to protect personal information, including encrypted website connections where available, password hashing, access controls, session security, account verification tools, security logs, restricted administrative access, and regular review of platform security.
No online service can guarantee absolute security, but we work to protect the information entrusted to us. Parents should keep their login details secure and should not share their account password with children or other users.
We keep personal information only for as long as reasonably needed. Parent account and child progress records are usually kept while the account remains active.
Detailed optional analytics journey and event records are kept for up to 90 days, after which they are deleted. Longer-term reporting should use aggregated information that does not identify a browser session.
If an account is closed, we will delete or anonymise personal information when it is no longer needed, unless we need to keep limited records for security, fraud prevention, billing, tax or accounting, legal obligations, disputes, or enforcing our terms.
Support messages and security logs may be kept for a reasonable period to help us manage the service and protect users.
Depending on the law that applies, parents and users may have rights to request access to personal information, ask for inaccurate information to be corrected, ask for information to be deleted, restrict how information is used, object to certain uses of information, request data portability, withdraw optional consent, and complain to a data protection authority.
We may need to verify the parent or guardian account before acting on a request, especially where the request relates to a child profile.
To make a privacy request, contact: privacy@xtables.co.uk.
UK users also have the right to complain to the Information Commissioner's Office.
We may update this Privacy Policy as the service develops or where legal, technical or business requirements change.
If we make significant changes, we will take reasonable steps to notify parents or guardians, such as by displaying a notice on the website or sending an account email.
For privacy questions or data protection requests, contact:
ZypherLock LLC
Operator of X Tables and Times Table Treasure
Email: privacy@xtables.co.uk
ICO registration: ZB973673