Privacy Policy
Last updated: 14 June 2026
This Privacy Policy explains how Typeswords ("we", "us", "our") collects, uses, and protects your personal data when you use typeswords.com(the "Service"). We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
Typeswords is operated as an independent service. If you have any questions about this policy or how we handle your data, contact us at privacy@typeswords.com.
2. Data we collect
We collect data in the following categories:
- Account data — your email address and display name, provided when you sign up via Firebase Authentication.
- Game data — typing speed (WPM), accuracy, passages attempted, and collection progress. This is tied to your account and stored in our database.
- Payment data — if you subscribe, Stripe processes your payment details on our behalf. We receive only a subscription status and Stripe customer ID; we never see or store your card number.
- Analytics data — if you consent, Google Analytics collects anonymised information about which pages you visit, how long you spend on them, and your general location (country/region level). Your IP address is anonymised before it is stored.
- Technical data — browser type, device type, and referring URL, collected automatically by our hosting infrastructure as part of normal web traffic.
We do not collect sensitive personal data (health, biometric, etc.).
3. Legal basis for processing
- Contract — account data and game data are processed to provide you with the Service you signed up for (UK GDPR Art. 6(1)(b)).
- Legitimate interests — technical/server logs are retained for security, debugging, and abuse prevention (Art. 6(1)(f)).
- Consent— analytics cookies (Google Analytics) are only set after you explicitly accept via the cookie banner (Art. 6(1)(a)). You may withdraw consent at any time by clearing your browser's local storage for this site.
- Legal obligation — we may retain certain records to comply with tax or accounting law (Art. 6(1)(c)).
4. Cookies
We use two categories of cookies:
| Name / Purpose | Category | Consent needed? |
|---|---|---|
| Session cookie — keeps you logged in between page loads (Firebase Auth) | Strictly necessary | No |
| cookie_consent — stores your analytics preference (localStorage) | Strictly necessary | No |
| _ga, _ga_* — Google Analytics measurement cookies | Analytics | Yes |
You can change your analytics preference at any time by clearing local storage for this site in your browser settings, which will cause the cookie banner to reappear on your next visit.
5. Third-party processors
- Google Firebase— authentication and app hosting. Google LLC, USA. Data may be transferred outside the UK under Google's standard contractual clauses.
- Stripe— payment processing. Stripe, Inc., USA. Covered by Stripe's own privacy policy.
- Google Analytics — analytics (consent-gated). Anonymised data is processed by Google LLC, USA under standard contractual clauses.
- PostgreSQL hosting provider — our database, hosted on a VPS within the EU/UK.
We do not sell your personal data to any third party, nor use it for advertising purposes.
6. Data retention
- Account and game data — retained for the lifetime of your account. If you delete your account, your data is removed within 30 days.
- Payment records — retained for 7 years as required by UK tax law.
- Analytics data — controlled by Google Analytics' default retention period (26 months), configurable in your Google Analytics account.
7. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the personal data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure— ask us to delete your data ("right to be forgotten"), subject to legal retention requirements.
- Restriction — ask us to limit processing of your data in certain circumstances.
- Portability — receive your data in a structured, machine-readable format.
- Object — object to processing based on legitimate interests.
- Withdraw consent — withdraw consent for analytics at any time (see Section 4).
To exercise any of these rights, email privacy@typeswords.com. We will respond within 30 days.
8. Complaints
You have the right to lodge a complaint with the UK's supervisory authority, the Information Commissioner's Office (ICO), if you believe we have not handled your data lawfully:
ico.org.uk/make-a-complaint · ICO helpline: 0303 123 1113
We would, however, appreciate the chance to address any concern directly before you contact the ICO.
9. Changes to this policy
We may update this policy from time to time. Material changes will be communicated via a notice on the site. The "Last updated" date at the top of this page reflects the most recent revision.
10. Contact
For any privacy-related questions: privacy@typeswords.com