Privacy Policy

The short version

We do not require accounts. Your typing history, settings, streaks and badges are stored only in your browser (localStorage) and never leave your device unless you choose to submit something.

What we store on our server

• Leaderboard: if you press "Submit to leaderboard" we store the name you typed, your language, speed, accuracy and a timestamp.
• Account (optional): your name, email address and a securely hashed password and recovery code (we can never read them). If you are logged in, a copy of your progress (history, XP, badges, lessons, streak) is stored so it can sync between your devices.
• Certificates: your account name, your best result and a certificate ID, so the certificate can be verified by anyone who has the ID. You can reset (delete) a certificate at any time.
• Classroom: class name, student names you enter, and speed/accuracy of runs submitted to a class.
• Abuse prevention: a one-way hashed form of your IP address is used for rate limiting. We do not store raw IP addresses in the database.

Choose a nickname if you do not want your real name to be public.

Visit statistics

To understand how many people use the site, each page view is counted anonymously on our own server: the page address, the type of device (mobile, tablet or desktop), the browser language and the website you came from (for example Google). No cookie is used, your IP address is not stored, and no profile of you is built. A one-way daily hash only lets us count unique visitors per day. Visits from bots are ignored, and nothing is counted if your browser sends “Do Not Track”.

Cookies and tracking

The only cookie is a strictly necessary, HttpOnly login cookie (ftt_auth) that is set only if you log in and keeps you signed in for 30 days. If we add analytics or advertising in future (for example Google Analytics or Google AdSense), those services may use cookies; we will list them here and ask for consent where required.

Advertising (Google AdSense)

When advertising is switched on, Google AdSense may show ads on content pages (not in the typing, lesson, game or certificate areas). Google and its partners may use cookies or similar technologies to show and measure ads, including personalised ads based on your visits to this and other sites. You can manage or opt out of personalised ads at adssettings.google.com and learn how Google uses data at policies.google.com/technologies/partner-sites. Visitors from the EU/UK/Switzerland are shown Google's consent message before personalised ads are used. When advertising is off, no AdSense script is loaded.

Your choices

• Download or delete all locally stored data at any time from My Progress.
• To delete your account and all server-side data, email us from your registered address.
• To remove a leaderboard entry from our server, email us the details.

Children

The site is suitable for students. We do not knowingly collect personal information beyond the optional names described above.

Contact

Questions about privacy: contact us.