Privacy policy
Last updated October 2026. The short version: we store what is needed to show your typing history, and nothing is sold.
What we collect
- Account data: your display name, email address, a securely hashed password and the date you registered. Passwords are hashed with bcrypt and are never stored or transmitted in readable form.
- Result data: for each completed run, the game, difficulty, score, WPM, accuracy, duration and timestamp, plus whether it was a daily challenge.
- Technical data: standard server logs, which include an IP address for abuse prevention and rate limiting on sign-in.
- Analytics data: only if you accept analytics cookies. Analytics is loaded through Google Analytics 4 with anonymised page and event data.
- Advertising data: Google AdSense may collect cookie and device data to serve and measure ads, as explained in the advertising section below.
Cookies and local storage
Typinger sets an httpOnly authentication cookie and a refresh cookie when you sign in. These are strictly necessary for the site to keep you logged in and cannot be disabled while you are signed in.
Your browser's local storage holds non-identifying preferences: your theme choice, the sound mute toggle, your preferred difficulty and your cookie consent decision. Analytics cookies are only set after you choose Accept in the consent banner, and you can withdraw consent at any time by clearing site data. Advertising cookies are set by Google AdSense and are subject to Google's consent message where required.
How we use your data
Account and result data exists to run the features you asked for: your dashboard, your WPM chart, your achievement badges, the daily challenge board and the public leaderboards. Your display name is visible on leaderboards; your email address never is.
We do not sell personal data and we do not profile you for marketing. When advertising is enabled, we use Google AdSense to display advertising; Google and its partners may then use cookies to serve ads based on your visits to this and other websites. Aggregate, anonymised statistics may be used to write articles, for example average speeds across difficulty levels.
Advertising and Google AdSense
When advertising is enabled, Typinger is supported by advertising delivered by Google AdSense. Google, as a third-party vendor, then uses cookies to serve ads on this site. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to Typinger and/or other sites on the Internet.
You can opt out of personalised advertising by visiting Google Ads Settings at adssettings.google.com or aboutads.info. Where required by law, Google shows a consent message before using advertising cookies, and you can change your choice at any time. Advertising is never placed inside an active typing test, lesson, game, exam or Daily Challenge; ads appear only after a result or inside editorial content.
Your rights and deletion
You can request a copy of your data or ask us to delete your account at any time through the contact form using the email address on the account. Deletion removes your profile, results and badges permanently, and leaderboard entries disappear with them.
Children under 13 should use Typinger with a parent or guardian and should not create an account with a personal email address.
Security and changes to this policy
Traffic is served over HTTPS, passwords are hashed with bcrypt, sign-in is rate limited after repeated failures and administrative pages require an admin role. No system is perfect, so please report any security concern to us directly.
If this policy changes we will update the date at the top of this page. Material changes will also be announced on the blog.
Frequently asked questions
- Do you use tracking cookies?
- We use analytics cookies only after you accept them in the consent banner. When ads are enabled, Google AdSense may set advertising cookies to serve ads; where required, Google shows a separate consent message. Authentication cookies are strictly necessary and are set only when you sign in.
- Can I use Typinger without an account?
- Yes. All tests, lessons and games work signed out, and nothing is stored about you beyond standard server logs.
- Where is my data stored?
- In a managed MongoDB database used only by Typinger. Access is restricted to the application and to site administrators.
- How do I delete my data?
- Use the contact form and choose Account or data request. Include the email address on the account and we will permanently delete the account, its results and its achievement records.
- Is my password readable by anyone?
- No. Passwords are hashed with bcrypt before storage, so neither we nor an attacker with database access can read them.