Blocked at school?

For the IT administrator

Trove Tools is a free set of interactive whiteboard tools for UK primary schools: number lines, place value counters, clocks, maps, diagrams and about a hundred more, made by Trove (trove.education), which makes resources for primary teachers. A teacher opens a tool in the browser and uses it on the board. There is nothing to install.

• No adverts.
• No user accounts and no sign-in, for staff or pupils.
• No cookies, and no advertising or social media scripts.
• No pupil data is sent anywhere. If a teacher types a class list into the name picker, it stays in that browser on that machine.
• Visits and loading speed are measured with Vercel Web Analytics and Speed Insights, which set no cookies and load from the site’s own address.

What to allow

Every tool loads from the first address, and allowing it is all the tools need. The second is only for the form that asks us for a new tool:

• tools.trove.educationEvery tool, its pictures and its fonts.
• creator.trove.educationOnly for the two forms: asking for a new tool, and saying something is not right with one.

For staff who use the Trove shop

Staff who buy printable worksheets from the shop need these as well, along with tools.trove.education above, which shows the tool pictures on the shop’s home page. Pupils do not need any of them:

• www.trove.educationThe shop itself.
• trove.educationOnly redirects to www, but it is what people type.
• lvehawydhyrcgllvfsrq.supabase.coThe catalogue, signing in, the account page and downloads.
• creator.trove.educationBasket prices, checkout and the download link after paying.
• fonts.googleapis.comThe shop's font.
• fonts.gstatic.comThe shop's font.

Checkout is Stripe. Stripe changes its hostnames without notice and asks for these wildcards:

• *.stripe.comCard payment at checkout.
• *.stripe.networkStripe's fraud checks.
• *.stripecdn.comStripe's fraud checks and wallet buttons.

If your filter cannot take wildcards, a checkout in October 2026 used checkout.stripe.com, checkout-cookies.stripe.com, api.stripe.com, js.stripe.com, r.stripe.com, merchant-ui-api.stripe.com, m.stripe.network and b.stripecdn.com. That list can change.

A card that needs 3D Secure sends the buyer to their own bank’s page to approve the payment. That address depends on the bank, so nobody can list it in advance: if a payment fails at the bank step, the bank’s page is the one to allow.

Questions

Email admin@trove.education and a person will answer. Trove’s privacy notice, which covers this site, is here.