Legal
Privacy Policy
Effective date: 18 April 2025
TypeSprint (“we”, “us”, or “our”) operates this website. This policy explains what data we collect, why we collect it, and how you can control it.
1. Data we collect
Account data
When you create an account we collect your email address, display name, and (if you sign in with Google) your Google profile ID. Passwords are hashed and never stored in plain text.
Typing session data
When you complete a timed sprint or lesson we store your words-per-minute, accuracy, mistake count, characters typed, session duration, and a timestamp. We do not record the individual keystrokes you type — only the aggregate results.
Usage data
Our hosting provider (Vercel) automatically logs request metadata such as IP address, browser user-agent, and page URLs for security and performance monitoring. We do not use third-party analytics trackers.
2. How we use your data
- To provide the typing practice and progress-tracking features.
- To authenticate you and maintain your session.
- To compute dashboard statistics (best WPM, accuracy trends, streaks).
- To send transactional emails (password reset, email verification) — no marketing emails unless you opt in.
3. Data sharing
We do not sell your data. We share data only with:
- Vercel — our hosting and serverless infrastructure provider.
- Google— if you choose to sign in via Google OAuth; Google’s own privacy policy applies to that interaction.
4. Cookies and sessions
We use a single session cookie (HttpOnly, Secure, SameSite=Lax) to keep you signed in. No third-party tracking cookies are set.
5. Data retention
Your account and session data are retained for as long as your account is active. You can delete your account at any time from your profile settings; all associated data is removed within 30 days.
6. Your rights
Depending on your jurisdiction you may have the right to access, correct, export, or delete your personal data. Email us at privacy@typesprint.app and we will respond within 30 days.
7. Children
TypeSprint is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it.
8. Changes to this policy
We may update this policy occasionally. We will post the new effective date at the top of this page and, for material changes, notify signed-in users by email.