Privacy Policy

Last updated: May 13, 2026

What information do we collect?

When you create an account, we collect your username, email address, and a securely hashed password (we never see your raw password). When you take a test, we record the results: WPM, accuracy, mode, duration, and timestamp. We do not store individual keystrokes, only aggregate result data.

How do we use your information?

We use your data to: show your personal stats and progress, calculate leaderboards, award badges and XP, send transactional emails (password resets, important account notices), and improve the site through anonymized analytics.

Do you use cookies?

Yes. We use a session cookie to keep you signed in. We use localStorage to remember that you've accepted the cookie banner. If we serve ads, we may use third-party cookies from advertising partners — these are governed by their own privacy policies.

Do you share my data with third parties?

No. We do not sell, rent, or share personal data with third parties. The only exceptions are: (1) payment processors (Stripe) for Pro subscriptions, (2) email delivery services for transactional emails, and (3) advertising networks if you accept cookies.

How is my data secured?

Passwords are hashed with bcrypt. All form submissions are protected by CSRF tokens. Database queries use prepared statements. The site runs over HTTPS with modern TLS. Sessions use httpOnly, SameSite=Strict cookies.

Can I delete my account?

Yes, contact us at hello@speedytypest.com and we will permanently delete your account and all associated test data within 30 days.

Who can I contact about privacy?

Email hello@speedytypest.com with any privacy questions or data requests.