Alora for school networks
This page is for whoever runs your school’s web filter. It says what Alora is, who runs it, and exactly which addresses to allow.
What Alora is
A study website for UK GCSE and A-Level students. It holds past papers from the exam boards, flashcards, revision notes, a specification tracker, a mistake log and a study timer — one place instead of six. It is free, it is used by students at home and at school, and there is no chat, no messaging between strangers and no user-to-user content of any kind.
Students sign in with an email address and password, or with Google. Everything a student writes is private to their own account.
Who runs it
Registered company
Alora Education Limited
Company number 16925988, incorporated in England and Wales
167–169 Great Portland Street, 5th Floor, London, England, W1W 5PF
Registered with the Information Commissioner’s Office as a data controller. Our privacy policy sets out what we store and for how long.
Addresses to allow
Alora is a website, not an installed application. Allowing these over HTTPS is all it needs.
Required — Alora does not work without these
www.aloraos.com
The site itself — every page, and the past papers students open.
aloraos.com
Redirects to www.aloraos.com. Students who type the short address land here first.
*.supabase.co
Our database and sign-in service (Supabase, EU-hosted). The app loads a student's own notes, flashcards and timetable from it over https and a websocket.
Optional — block these freely
Nothing here is needed for a student to study. We would rather say so than have you find out by testing.
accounts.google.com
“Continue with Google” sign-in, for students who chose that instead of a password.
If blocked: That button stops working. Students can still sign in with an email address and password.
eu.i.posthog.com
Anonymous, EU-hosted product analytics — which features get used. No names, no work, no page content.
If blocked: Nothing changes for the student. Block it freely.
eu-assets.i.posthog.com
Where the analytics script fetches its own configuration. Same tool as above, separate host.
If blocked: Nothing changes for the student. Block it freely.
*.ingest.de.sentry.io
Crash reports, EU-hosted, so we find out when something breaks.
If blocked: Nothing changes for the student. Block it freely.
www.youtube-nocookie.com
YouTube's no-cookie player, only when a student embeds a video in their own notes.
If blocked: An embedded video shows as a blank box. The note itself is fine.
Past papers, and why Alora is not a proxy
Students open past papers inside Alora. Our server fetches the PDF from the exam board and passes it on, because a browser cannot load those files directly.
It can only ever fetch a paper that is in our catalogue. A request names a paper by its catalogue identifier — /papers/<id>/question.pdf — and never contains a web address. There is no way to ask Alora to fetch an arbitrary page, and the server refuses any host that is not one of these exam boards:
aqa.org.uk · ocr.org.uk · qualifications.pearson.com · wjec.co.uk · eduqas.co.uk · sqa.org.uk · ccea.org.uk
Alora cannot be used to reach anything a filter blocks. If a categorisation service has it listed as a proxy or an anonymiser, that is wrong, and we would be glad to hear from you so we can correct it.
Allowing “Continue with Google”
If your school uses Google Workspace and restricts which third-party apps students may sign in to, Alora needs to be allowed. In the Google Admin console:
- Go to Security → Access and data control → API controls, then Manage third-party app access.
- Choose Configure new app → OAuth App Name Or Client ID and search for Alora.
- Set it to Trusted for the students’ organisational unit.
Alora asks only for a student’s email address and name. It requests no access to Drive, Gmail, Classroom or Calendar. If you would rather not allow it at all, students can sign in with an email address and password instead — nothing else changes.
Talk to us
School IT and filtering
If Alora is blocked on your network and this page does not explain why, write to us and say which filter you use. We will tell you exactly what we see and ask the vendor to recategorise if the listing is wrong.