Privacy
Short, because there is not much to say. This site sells nothing, tracks nobody, and the trial holds invented data.
This site
These pages are static files. There is no analytics script, no advertising, no tracking pixel and no cookie. Nothing is stored in your browser and nothing about your visit is recorded beyond the ordinary server logs Cloudflare keeps in order to serve the page, which are not read by anybody here.
If you email
Your message and address sit in one ordinary mailbox, and are used to reply to you and to remember that we spoke. They are not added to a mailing list, because there is no mailing list, and they are not passed to anybody. Ask, and they are deleted.
A trial
It is invented data, and it should stay that way
A trial department arrives already full of invented people, invented job plans and an invented rota. Nothing in it is real, and we ask you not to make it real: please do not put your colleagues' names, your own job plans or anything from your trust into a trial. It is a sandbox for seeing how the thing behaves, not a place to do work.
What it stores
Whatever you type into it, for as long as the trial lasts — the rota you build, the people you rename, the rules you change. Alongside it: a one-way scrambled copy of your trial code, so the code itself is not written down anywhere; the date the trial expires; and the time it was last used, so it is possible to see whether a code was ever tried.
It is deleted at the end
When the trial expires, the whole department is deleted — the rota, the invented people, the login, all of it — and not merely closed off. A job runs daily to do this. There is a button inside the trial marked I'm finished that does it immediately.
Where it is held
The site and the trial run on Cloudflare. The trial's database is hosted in the European Union, and is separate from any database holding a real department's rota. The connection is encrypted end to end.
Who can see it
Whoever has the code, and the person who runs this project — who can reach the database in order to set a trial up and delete it afterwards. One trial cannot see another: the database itself refuses, rather than each screen being trusted to ask properly.
Having something removed
Email hello@uprota.co.uk and say what you want gone. A trial can be deleted the same day. There is no form and no process to go through.
This is not a trust system
UPRota is an independent project and is not affiliated with, endorsed by or operated on behalf of any NHS organisation. It holds no patient data of any kind, and a trial holds no real staff data either.
Last updated 29 September 2026.