Privacy
Your privacy, in plain English.
ukdata has no accounts and keeps no record of what you search. This page explains the little that is collected, why, how long it is kept, and which other services your browser talks to.
- No accounts
- No tracking cookies
- Updated 13 October 2026
Who runs this site
ukdata (ukdata.app) is run by Tim Biddle, an individual who builds and runs it in his own time. He is the controller of any personal data the site handles. For anything about your privacy, email privacy@ukdata.app.
The short version
- There are no accounts, and we keep no database of the postcodes people search.
- Like most websites, our host Cloudflare keeps short-lived request logs. These can include your IP address and the postcode you looked up, and are deleted within 7 days.
- There are no tracking cookies, analytics or advertising. Your theme and recent postcodes are kept in your own browser.
- To fetch live data, your browser contacts some public data services directly. They see your IP address and the area you are looking at.
What we collect and why
We do not ask for your name, email address or anything else about you. The site works the same for everyone, without signing in.
| What | Why | Lawful basis | How long |
|---|---|---|---|
| Request logs: the address of each page or data request (which can include a postcode or map coordinates), the time, your IP address and the technical details your browser sends | Running the site, fixing faults and keeping it secure, including spotting abuse | Legitimate interests (keeping the site running and secure) | Up to 7 days in Cloudflare's logs, then deleted |
| Error logs: when a data source fails, a short note of what failed, sometimes with the area code (for example a council or constituency code) being looked up | Finding and fixing broken data sources | Legitimate interests (keeping the site running) | Up to 7 days, as part of the same logs |
| Postcodes sent to our server by some explorers (energy certificates, sold prices, company insolvencies, share links and share images) | Fetching the data you asked for from the EPC register, postcodes.io and The Gazette, which we look up on your behalf | Legitimate interests (giving you the data you asked for) | Not stored. Used to answer the request and then discarded; the request address appears in the logs above for up to 7 days |
| Cached data: copies of the public data returned by our sources, filed under an area code or map position | Making pages faster and staying within the sources' usage limits | Not personal data - it is not linked to you or any visitor | From a minute to about a month, depending on how often the source changes |
Your postcode in the page address. When you search, the postcode is added to the page address (for example ?postcode=SW1A 1AA) so the page can be bookmarked and shared. That means it appears in your browser history, and in any link you share.
Your location. We only use your location if you press “Use my location”. Your browser asks your permission first, then sends your coordinates directly to postcodes.io to find the nearest postcode. Your coordinates are not sent to us.
Cookies and settings stored in your browser
ukdata itself sets no cookies. Our host Cloudflare may set a strictly necessary security cookie (such as __cf_bm) if it needs to tell people from automated traffic; it is not used to track you. The site uses your browser’s local storage to remember two things:
theme- whether you chose the light or dark theme.ukdata:recent- your last 5 postcodes, saved each time you search on the dashboard so you can pick them again.
These stay on your device and are never sent to us. They are not cookies, and they don’t need your consent because they only remember choices you made. You can clear them at any time by clearing this site’s data in your browser settings.
Third parties your browser contacts
Some live data is fetched by your browser straight from the source, rather than through our server. Each of these services receives your IP address and the postcode or map position being looked up, and handles it under its own privacy policy:
- postcodes.io (api.postcodes.io) - receives the postcode you search, or your coordinates if you press “Use my location”.
- Open-Meteo (api, air-quality-api and archive-api .open-meteo.com) - weather, air quality and climate history, from the centre point of your postcode.
- Environment Agency flood monitoring (environment.data.gov.uk) - flood warnings near the centre point of your postcode.
- Transport for London (api.tfl.gov.uk) - nearby stops and arrivals.
- Food Standards Agency (api.ratings.food.gov.uk) - food hygiene ratings nearby.
- Parliament image servers - photos of MPs and members on the politics pages load directly from UK Parliament, the Scottish Parliament and the Northern Ireland Assembly, which see your IP address.
Everything else is fetched by our server, so those sources see our server rather than you.
Who processes data for us
Cloudflare, Inc. hosts the site (on Cloudflare Workers), keeps the request logs described above for up to 7 days, and handles email sent to ukdata.app addresses. Cloudflare may process data in the United States. Those transfers rely on the UK safeguards Cloudflare offers: the UK Extension to the EU-US Data Privacy Framework and the ICO’s International Data Transfer Addendum. See Cloudflare’s privacy policy.
When an explorer asks our server for data, the server passes the postcode or area to the relevant public source (for example the EPC register, postcodes.io or The Gazette) to get the answer. Nothing that identifies you is sent with it.
Your rights
Under UK data protection law you can ask for a copy of personal data we hold about you, and ask us to correct it, delete it or restrict how we use it. Where it applies, you can also ask for your data in a portable format. Because we keep no accounts and logs are deleted within 7 days, there will usually be very little to find.
Your right to object. Where we rely on legitimate interests (the request and error logs), you have the right to object to that processing at any time. Tell us why, and we will stop unless we have compelling grounds to continue.
To use any of these rights, email privacy@ukdata.app. We will reply within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office: ico.org.uk/make-a-complaint or 0303 123 1113.
Changes to this policy
This policy was last updated on 13 October 2026. If anything changes, the new version will be posted on this page with a new date. See also About & data sources.