The short version
- No third-party trackers or analytics scripts run while you take a test. If we ever show advertising, it stays outside the typing area, and every advertising partner will be listed on this page.
- We only set essential cookies: the ones that keep you signed in, and one that remembers the language version of the site you picked.
- Your settings stay in your browser. Your results stay on your device, and are only stored on our server if you sign in.
- Deleting your account deletes everything we hold about you.
What we store if you don't have an account
Settings. Your preferences, such as mode, theme, sounds and fonts, are kept in your browser's local storage under the key tt:settings:v1. They don't leave your device unless you sign in.
Results. Each test you finish is saved in your browser's IndexedDB on that device, along with its metrics and keystroke log, so you can see your history and replay your tests. You can turn this off in settings or clear it from the data section.
Anonymous submissions. When you finish a test, the result and its keystroke log are also sent to our server to be checked. They're not linked to an account and are used only for overall statistics, such as the percentile reference. They never appear on leaderboards. If you sign in within 24 hours to rank a guest result, that result is moved to your account. If you take part in a challenge link as a guest, the name you typed is stored with that attempt so it can show on the challenge's board. Their keystroke logs are deleted after 90 days.
What we store if you sign in
Your account. Your email address (so we can send you sign-in links), the username you choose, and when you created the account. If you sign in with Google or GitHub, we store the account ID they give us and your email address. We never receive your password or your contacts.
Results and keystroke timing logs. Every result you submit while signed in is stored with your account: the metrics, the settings you used, your device type and the keystroke log, meaning which keys you pressed, when, and for how long. That log is behavioural data. It's what lets us recompute your score, catch cheating, show you replays and give you per-key statistics, and we treat it as personal data. On free accounts, raw logs are kept for 90 days. After that, only the metrics and summary figures remain.
Settings. Your settings are synced to your account so they follow you from device to device.
Cookies. A first-party, HttpOnly session cookie identifies your session. It holds a random token, not your email address, and it expires when you sign out or after a period of inactivity. A second small cookie only tells the page that you're signed in. If you sign in with Google or GitHub, a short-lived cookie protects that sign-in step and is then deleted. Whether or not you sign in, we may set a cookie that remembers the language version you chose, or that you dismissed the suggestion to switch.
Sign-in emails. When you sign in, we send a one-time link to your email address through our email provider. The link expires quickly and only works once. We don't send marketing email.
What we don't do
- We don't show a consent banner for our own cookies, because they're strictly necessary for sign-in and your language choice. If an advertising partner ever sets its own cookies, we'll name it here and tell you how to opt out.
- We don't use third-party analytics or tracking scripts, and nothing loads from other domains during a test.
- We don't sell or share your personal data. The only companies that process it for us are our hosting provider and our email provider, and both are bound by data-processing terms.
- We don't allow accounts for children under 13.
Your rights and controls
Export. Download everything we hold about you as a JSON file from your account page.
Delete. "Delete account" on the account page immediately removes your account, settings, results and keystroke logs. Backups age out within 30 days. Your leaderboard entries are removed too. Overall statistics that can't identify you are kept.
Opt out of leaderboards in settings. Your results are then stored only for your own history.
Clear local data from the settings page, or by clearing this site's data in your browser.
Ask us. For access, correction or any other request, email [email protected].
Lawful basis
Where data-protection law requires one, here it is. Running the test and saving results on your device is how we provide the service you asked for. Storing results against your account is the same. Checking results for cheating and producing overall statistics are in our legitimate interest in keeping leaderboards honest, and that's balanced by the fact that anonymous logs can't be linked to you.
Changes
When what we store changes, we'll update this page and the date at the top. The terms of use cover the rules for leaderboards and accounts. We don't use tricks to keep you signed in or to stop you deleting your data.