Privacy Policy
What we collect, why, where it lives, and how to get rid of it.
Effective
The short version
You can take every typing test on this site without an account, and without us storing anything about you on a server. If you never sign in, nothing you type and no score you get leaves your browser.
Creating an account is what turns on saved history, streaks, achievements and AI-personalised lessons — because those features need somewhere to keep your results between visits.
Who runs this site
Ai-TypingTest.com is an independent project. For anything in this policy — including a data access or deletion request — email aitypingtest.com@gmail.com or use the contact page. We are the data controller for the information described below.
What we collect
If you are signed out
Nothing is sent to us. Your test runs entirely in your browser. A few preferences are saved locally on your own device using localStorage — see the cookie and local storage policy for the full list. That data never reaches our servers and we cannot read it.
If you create an account
| Data | Why |
|---|---|
| Email address, display name, profile photo URL | To identify your account and show who you are on the leaderboard. Supplied by your sign-in provider (e.g. Google) when you choose to sign in that way. |
| Test results — WPM, accuracy, consistency, duration, mistakes, timestamp | To draw your progress charts, award achievements, and rank the leaderboard. |
| Streak and achievement state | To keep your daily streak and badges across devices. |
| AI lesson history and the weak-key statistics derived from your results | To generate practice text that targets the keys and letter pairs you actually miss. |
| Passkey public keys and credential IDs | If you register a passkey. These are public keys only — the private key never leaves your device, and we could not extract it if we wanted to. |
What we deliberately do not collect
- No advertising or tracking cookies. There are no third party ad scripts on this site.
- No keystroke logging outside a test. We record what you typed only within the passage of an active test, and only to score it.
- No passwords. Authentication is delegated to your sign-in provider or to a passkey; we never see or store a password.
- No selling or sharing of personal data with data brokers or advertisers, for any purpose, ever.
Who processes it for us
- Google Firebase (Authentication, Cloud Firestore) — hosts the account and result data described above. Governed by Google Cloud’s data processing terms.
- Google Gemini API — only when you explicitly generate an AI-personalised lesson. What gets sent is your aggregate weak-key statistics and chosen topic, so it can write practice text. Not your email, name, or raw typed content.
These providers may process data outside your country, including in the United States. Transfers rely on the providers’ Standard Contractual Clauses.
Legal basis (UK / EU / EEA visitors)
- Contract — account data and saved results, because you asked us to keep them.
- Legitimate interests — keeping the service running and secure, and preventing leaderboard abuse.
- Consent — AI lesson generation, which happens only when you press the button.
How long we keep it
Account data and results are kept until you delete them or ask us to close your account. Delete your account and the associated profile, results, streak, achievements and lessons are removed. Leaderboard entries are removed with it. There is no shadow copy kept for analytics.
Your rights
Wherever you are, you can ask us to show you what we hold, correct it, export it, or delete it. If you are in the UK, EU or EEA, that is your right under the UK GDPR / GDPR, along with the right to object and to lodge a complaint with your supervisory authority (in the UK, the ICO). If you are in California, the CCPA/CPRA rights to know, delete, correct and opt out of sale apply — noting that we do not sell or share personal information as those terms are defined.
Email aitypingtest.com@gmail.com and we will action it within 30 days. There is no charge.
Children
The site has typing games and practice aimed at children, and those work fully without an account. Accounts are not intended for under-13s (or under-16s in the UK/EEA) without a parent or guardian. If you believe a child has created an account, email us and we will delete it.
Security
Traffic is served over HTTPS. Access to your data is enforced by Firestore security rules that scope reads and writes to your own user ID. Passkey support means you can sign in without a shared secret at all. No system is perfect, but we do not store the category of data — payment details, government IDs — that would make a breach severe.
Changes
If this policy changes materially, the effective date at the top changes with it. Continued use after that date means you accept the revision.