Open · U-Maths network

Leeds Mathematics School

WordPress behind Cloudflare (DNS and CDN), Barracuda-filtered mail split between Microsoft and Google, and the widest set of SaaS signals in the network.

WordPress + Beaver BuilderCloudflareMicrosoft 365 + Googleno DMARC

Sponsor / owner: The GORSE Academies Trust. All values below are a point-in-time snapshot observed 24 July 2026 from public DNS, WHOIS/RDAP, HTTP response headers and published policies — how this was gathered.

Infrastructure

Website

lmas.ac.uk

Platform / CMS

WordPress + Beaver Builder

WordPress 7.0.2 with Beaver Builder and a custom child theme; exposes /wp-json/.

Web host / origin

SiteGround

Origin revealed as SiteGround (sg-cachepress optimizer header) behind Cloudflare. The domain's separate Jisc registration agent is Mythic Beasts.

CDN

Cloudflare

DNS provider

Cloudflare

hal.ns.cloudflare.com olga.ns.cloudflare.com

Registry

.ac.uk (Jisc)

Registrar / agent

Mythic Beasts Ltd

Registrant

The Gorse Academies Trust (registered for: Leeds Mathematics School (LMaS))

Domain created / renewal

4 June 2021 · renews 28 May 2027

Microsoft 365 + Google via Barracuda Email Security Service

Barracuda ESS in front of mail; SPF authorises both Microsoft 365 and Google Workspace.

DMARC

no DMARC

No DMARC record was found for lmas.ac.uk at the time of observation.

Third-party signals in DNS

Domain-verification and SPF records left in DNS reveal which SaaS platforms a domain has been connected to. These are fingerprints, not proof of active use.

Microsoft 365 MS= token
Google site verification (×2)
Meta / Facebook facebook-domain-verification
Canva canva-site-verification
Have I Been Pwned domain breach monitoring (hibp-verify)
Barracuda ESS email security gateway

Privacy & data processing

policy published

A GORSE Academies Trust policy (external DPO: Data Protection People, per the ICO register), with pupil notices published as Google-Drive PDFs. The site runs no consent banner while loading GA4 ×2, GTM and three Meta Pixels — the most aggressive tracking in the network.

Policy

www.tgat.org.uk/privacy-notice/ (Trust-wide HTML + audience notices (Google Drive PDFs))

Scope

Academy-trust policy

Data controller

The GORSE Academies Trust

ICO registration

ZA143774 · registration expires 30 September 2026

Data Protection Officer

Data Protection People (Leeds).

Consent tool

no consent banner

Named processors

Not determinable from published text per-audience pupil notices are published as Google-Drive PDFs that aren't machine-readable

Cookies & tracking

GA4 (two properties)Google Tag Manager (GTM-MJDP2XS)Meta / Facebook Pixel (three)

What the site loads vs. what it discloses

No cookie-consent banner at all, yet the homepage fires GA4 (two properties), GTM and three separate Meta Pixels on load — the heaviest, least-gated tracking of any school here.

Sources

1.Live DNS, WHOIS/RDAP and HTTP headers for lmas.ac.uk (observed 24 July 2026)
2.ICO data-protection register entry — ico.org.uk/ESDWebPages/Entry/ZA143774
3.Published privacy / cookie policy — www.tgat.org.uk/privacy-notice/
4.Leeds (LMaS) on the main guide — mathsschools.co.uk/schools/leeds-maths-school/

← All schools Compare the whole network →