Privacy Policy

1. Data Controller & Contact

TypeSprint is operated by the entity listed in our Imprint.

For data protection inquiries, requests to access, correct, or delete your data, please contact us at contact@typesprint.io.

2. Data We Collect

2.1 Data Stored in Your Browser

We store the following data locally in your browser (localStorage):

  • Language preference - Your selected language (English or German)
  • User preferences - Your chosen username (3-20 characters) and avatar emoji
  • Cookie consent status - Whether you've accepted our cookie notice

This data remains on your device and is not transmitted to our servers unless you join or create a game.

2.2 Data Stored on Our Servers

When you create or join a typing test, we store:

  • Username - Your chosen display name (alphanumeric, 3-20 characters)
  • Avatar - Your selected emoji avatar
  • Role - Whether you joined as a player or spectator
  • Test Statistics - Words per minute (WPM), characters per minute (CPM), typos, points, and characters typed
  • Timestamps - When you created your user account and test sessions
  • Test Participation - Which tests you participated in

We do NOT collect email addresses, IP addresses (beyond server logs), passwords, or any other personally identifiable information beyond your chosen username.

2.3 Cookies & Analytics

We use Google Analytics to understand how visitors use our site:

  • Google Analytics cookies (_ga, _ga_*) - Track anonymous usage statistics, session data, and general site interactions
  • Data collected by Google - Browser type, device information, approximate location (country/city level), pages visited, and interaction patterns

Google Analytics data is subject to Google's Privacy Policy.

3. Why We Collect Data

Local storage: Essential for providing core functionality:

  • Remembering your language preference across visits
  • Pre-filling your username and avatar when joining tests
  • Tracking whether you've seen the cookie consent banner

Server database: Necessary for multiplayer test functionality:

  • Displaying player names and avatars to other participants
  • Tracking real-time typing progress during tests
  • Calculating and displaying test results and leaderboards
  • Coordinating multiplayer sessions

Google Analytics: Helps us improve the service by understanding:

  • How many people use TypeSprint
  • Which features are most popular
  • Where technical issues may be occurring
  • General usage patterns to guide improvements

4. Data Retention

Local storage: Data remains in your browser until you clear your browser data or we update/remove it programmatically.

Server database: Test sessions and user data are retained indefinitely to preserve test history and statistics. You may request deletion at any time (see section 6).

Google Analytics: Analytics data is retained according to Google's standard retention policies (currently 26 months for user-level and event-level data).

5. Third-Party Services

We use the following third-party services:

These services may process data in countries outside the European Economic Area (EEA), including the United States. Data transfers are protected by appropriate safeguards such as Standard Contractual Clauses or Privacy Shield frameworks where applicable.

6. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have the following rights:

  • Right of access - Request a copy of the personal data we hold about you
  • Right to rectification - Request correction of inaccurate data
  • Right to erasure - Request deletion of your data ("right to be forgotten")
  • Right to restriction - Request that we limit how we use your data
  • Right to data portability - Request your data in a machine-readable format
  • Right to object - Object to our processing of your personal data
  • Right to withdraw consent - Withdraw consent for data processing at any time

To exercise any of these rights, please contact us at contact@typesprint.io. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.

7. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction:

  • HTTPS encryption for all data transmission
  • Secure database hosting with MongoDB Atlas
  • Regular security updates and monitoring
  • Access controls and authentication mechanisms

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security of your data.

8. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of TypeSprint after changes constitutes acceptance of the updated policy.

Last updated: October 2025