Privacy Policy

Last updated: October 13, 2026

Certificate country information

New certificates issued from standard typing tests require an email address and country name. Your country is entered by you, not inferred from your IP address, and is stored with your certificate record for certificate display and administrator reporting. Your email remains private and is excluded from public verification and general analytics events. Marketing messages require a separate optional opt-in. Kids certificates retain their existing no-email flow.

Optional practice reminder emails

Practice reminders require a separate, unchecked account preference. When enabled by the site administrator, eligible approved accounts may receive at most one weekly reminder after seven days without account activity. We store reminder consent time/source, send-attempt times and a private unsubscribe token. Use account settings or confirm the unsubscribe link in any reminder to stop these messages without signing in. Account verification, password reset, certificate, subscription and retention notices are separate transactional messages. This preference does not opt you into other marketing.

Certificates in your account

Verified learner accounts can access server-published certificate records whose stored email matches their verified email. Hiding a certificate only changes your account list, not public verification. Account deletion or subscription expiry does not delete the separate certificate registry. Ask support for certificate corrections or withdrawal. Kids records and records without matching email are not automatically linked.

Automatic account sync and profile

Signing in enables automatic sync of supported learning progress on that device while pages are open. Offline changes stay in the browser and retry later. Conflicting copies require a choice before replacement; active typing pages defer incoming replacements. Log out to stop automatic sync on this device. Optional profile name and country are private and are deleted with the account. Paddle sandbox can be used by approved testers to simulate checkout and subscription events with test card information. Sandbox transactions do not charge real funds; TypingTutor.Online does not ask visitors to enter real card numbers into the site. Live billing has not been enabled.

Private account and subscription testing

Guest learning and existing local export/import remain available. Account signup is currently restricted to email addresses approved by the site administrator. These are testing plans. Approved testers may use Paddle sandbox checkout with test payment details, but no real charge or live automatic billing takes place. Accounts store an email address, password hash, one-use verification/reset token hashes, session-token hashes, plan dates, activity times and one supported progress snapshot of up to 1 MB.

Free test accounts and their cloud data expire 30 days after the last successful cloud save or restore. Monthly and Yearly test plans have the same Premium stats access, with up to 365 days of available local/synced records. Both retain the current cloud copy throughout their covered period plus a 30-day renewal/export grace period. Individual activity history caps still apply; the service does not store an unlimited snapshot archive. Ad-free access ends at the end of the covered period. Simply viewing an account does not renew retention. Unverified registrations expire after 24 hours. Users can delete their account using their password. Browser data and downloaded exports remain on the user's device.

Verification and password-reset links expire in one hour and work once. During private testing the administrator can inspect outbound test emails in a protected area; these previews expire after two hours. Actual delivery is optional and uses PHPMailer with authenticated TLS SMTP through the configured email provider. That provider processes recipient addresses and message contents for delivery; no bulk marketing sender is enabled by this feature. Scheduled maintenance can prepare expiry notices seven days and one day before a covered period or data-retention deadline. Administrator-maintained tester invitation lists remain until the administrator removes them.

Account sync excludes certificate records, shared cards, custom passages, mistake-drill text, settings and administrator data. Sign-in cookies expire after 30 days. Rate-limit counters store hashed IP/account identifiers and are removed by cleanup after one day. Account expiry is enforced on access; a daily cleanup job, supplemented by cleanup on account requests, removes expired files. Hosting logs and hosting backups may have separate retention. No historical cloud snapshot archive is maintained.

Teacher-managed student logins

During private classroom testing, an approved teacher can create student profiles using a display name or school identifier and a username, without a student email address or date of birth. The teacher acknowledges authorisation and required school/guardian permission. Passwords are generated, stored as hashes and shown only when created or reset. Student sessions last up to eight hours; teachers can reset passwords or remove profiles.

Student logins can access their assigned classroom and their own results, not classmates’ records or classroom billing. Supported typing progress is saved automatically to the student profile while connected. Online snapshots expire after the classroom plan’s retention period (30 days for Free; up to 365 days for paid classroom packages while covered, including a 30-day post-expiry export grace period), measured from the snapshot’s last save. Removing the student deletes their managed login, snapshot and shared results. A deleted or expired teacher account removes its classrooms and managed profiles; archiving a class disables managed login. Hosting logs and backups may have separate retention.

On this browser, guest progress is set aside while a managed student is connected and restored on sign-out. Student sign-out clears that student’s supported local learning records; unsent or unsaved work should be backed up before signing out. Use separate browser profiles where appropriate and one active learner at a time. Teacher-managed profiles do not automatically link to personal email accounts or certificate ownership. Public certificate verification remains a separate publishing action.

Premium stats and classroom packages

Basic stats remain available to guests and Free accounts. Complete dashboards and detailed history require a server-confirmed active paid personal subscription or an eligible paid classroom package. Classroom teachers have a one-time 30-day full-reports trial. Seat counts apply across active classrooms; students removed from a class release their seat where it is no longer used elsewhere. Reports remain practice results reported by browsers. Paid classroom result history is retained for up to 365 days, with a 30-day export grace after paid coverage ends; access to paid features ends at coverage expiry. Local export/import remains available regardless of membership.

Overview

TypingTutor.Online is designed so most learning activity can be used without creating an account. This policy explains what information stays in your browser, what may be sent to TypingTutor.Online or service providers, and the choices available to you.

Information stored in your browser

Many features use browser storage so progress can remain available on the same device. Depending on the features you use, this can include theme and sound settings, lesson progress, practice time, achievements, typing statistics, test results, game scores, weak-key performance, Typing Speed Improver diagnostics and session summaries, daily goals, reminder preferences, certificate eligibility, locally saved certificates, custom keys or word lists, Kids-section progress, custom spelling lists, and Sharing Center history.

Most game scores and personal bests remain local to your browser. The Typing Challenge also offers an optional public Top 100 leaderboard for the standardized one-minute Speed Challenge on Normal difficulty using the Random mix text option with at least 97% accuracy. If you choose to join, the public ranking can show only your chosen display name or nickname, country, WPM, accuracy, and ranking position. Your email address is kept private and is not returned by the public leaderboard.

A valid email is used privately to keep one best qualifying leaderboard score per typist and to let you update that record. A separate, unchecked option lets you request automatic ranking-alert emails when a new qualifying score moves your Top 100 position down. Ranking alerts are limited to reduce repeated messages and include an unsubscribe link. Joining the public leaderboard does not require agreeing to ranking-alert emails, and leaderboard email consent is separate from certificate marketing-email consent.

You can remove locally stored information with the site's reset controls where available or by clearing TypingTutor.Online site data in your browser. Exported backups, downloaded certificates, score cards, or other files remain wherever you choose to save them.

Typing text and practice content

TypingTutor.Online's first-party practice analytics are designed to record performance information such as WPM, accuracy, score, errors, duration, game or test name, and completion status—not the custom text or passages you type. Custom practice text and custom spelling content are kept in the browser unless a feature clearly tells you otherwise.

Typing Challenge share links may contain non-sensitive challenge settings such as mode, difficulty, duration, text-mix choice, a random text seed, and a score to beat so another person can receive the same challenge. Private leaderboard email addresses are not placed in challenge share links.

Third-party analytics tools described below operate under their own settings and privacy policies. Their session-measurement technologies may observe page interactions, so users should avoid entering sensitive personal information into typing exercises or feedback fields.

Typing certificates and verification

Certificates are also saved locally in your browser. For new certificates issued from standard typing tests, TypingTutor.Online sends a limited verification record to its protected certificate registry when the certificate is created so the certificate ID and QR verification link can work from another device.

The protected standard typing certificate record can include the certificate ID and type, learner name, email address, country, displayed typing metrics such as WPM, Net WPM, Gross WPM, accuracy, errors, consistency and duration where applicable, issue/completion dates, and a limited qualifying-evidence summary. The email address is kept private: it is not printed on the certificate and is removed from the public verification response. Typed passages and custom practice text are not stored as part of the certificate registry.

Typing certificate forms may also offer an optional, unchecked choice to receive occasional TypingTutor.Online typing tips and updates, expected to be about once a month. Certificate creation does not require agreeing to marketing emails. When this option is selected, TypingTutor.Online stores the email-marketing consent status, consent time, and source with the protected certificate record so the choice can be documented. Kids certificate flows do not collect email addresses for this purpose.

Kids certificates remain local by default. A Kids certificate is sent to the verification registry only when a parent or guardian deliberately chooses public verification or later enables verification for that certificate. Learners and guardians should avoid publishing a child's full name unless they are comfortable with that name appearing in a verifiable certificate record.

First-party analytics

TypingTutor.Online uses an internal analytics system to understand traffic and improve lessons, tests, games, certificates, and other features. It may record page or module names, traffic source, device category, event names, session activity, and selected performance metrics such as WPM, accuracy, score, errors, duration, and completion status.

The browser creates random visitor and session identifiers. Internal visit identifiers renew after 30 minutes without recorded page events or user activity when the visitor interacts, navigates or returns to the tab; background heartbeats alone do not create a new visit. The server stores one-way hashes of those identifiers rather than the original identifier values. In the Kids section, the internal visitor identifier is session-only rather than a persistent cross-session identifier.

For coarse geography reports, the server may derive country, region, city, and timezone from hosting or CDN location headers, a local GeoIP service, or a short server-side lookup to ipapi.co. The raw IP address is not stored in the internal analytics tables or geography cache, although it is necessarily processed while a network request is handled and may also appear in ordinary hosting or security logs.

Microsoft Clarity and Yandex Metrica

General website pages may use Microsoft Clarity to understand how visitors use the site through interaction analytics such as clicks, scrolling, heatmaps, and session-replay style diagnostics. Clarity is intentionally not loaded by TypingTutor.Online on the Kids-section pages in this build. Microsoft processes Clarity data under its own privacy terms. See the Microsoft Privacy Statement.

TypingTutor.Online also uses Yandex Metrica for traffic measurement, goals, click maps, Webvisor/session analysis, referrer information, and feature-performance reporting. Metrica is present on main site pages and Kids-section pages. Yandex may process information using cookies or similar technologies according to its own policies. See the Yandex Privacy Policy.

Advertising

Current status: Google AdSense ad-loading code, display units and advertisement placeholders have been removed from the public website while the content and user experience are reviewed. ads.txt may remain published as a publisher-identification file, but that does not itself display advertisements.

If advertising is introduced again, we will revise this disclosure to identify active advertising providers and their use of cookies or similar technologies and provide legally required privacy and consent choices before activating non-essential ad technologies. Google’s Privacy Policy explains Google's data practices when its services are used. The current lack of advertising does not disable the separate analytics services described above.

For administration, a new email-account registration also creates an internal alert containing a hashed account identifier, account category, time and read status. These alerts are retained for up to 90 days, with a maximum of 1,000 entries. The alert does not keep a separate email copy; authorised administrators view the email from the current account record while it exists.

Browser notifications and reminders

If you enable daily practice reminders, the website may request browser notification permission and use a service worker. The reminder time, permission state, and related reminder settings are stored in the browser. TypingTutor.Online does not require an email address or phone number for these browser reminders. You can turn reminders off in the site settings or revoke notification permission in your browser.

Sharing Center and downloaded files

The Sharing Center reads eligible progress already stored in your browser and generates share cards locally. Previewing, copying, printing, or downloading a locally generated card does not by itself upload the card to TypingTutor.Online. Information leaves your device when you deliberately use a browser/native sharing service, WhatsApp, or another external destination.

Downloaded certificates, PDFs, PNGs, score cards, offline-game ZIP files, and exported progress are saved to locations you choose and are then controlled by your device, browser, cloud-storage provider, or other destination.

Information you choose to provide

If you contact TypingTutor.Online, request support, or send feedback, we may receive the information you voluntarily provide, such as your name, email address, message, screenshot, browser details, or other information included in your request. Please do not send passwords, identity documents, financial information, home addresses, or other sensitive personal information.

Children's privacy

The Kids section does not require a child's email address, date of birth, phone number, public profile, or chat account. Kids learning paths, lessons, stars, badges, test results, game scores, daily goals, activity history, certificate records, and custom spelling lists are primarily stored in the current browser.

Parents, guardians, and teachers should supervise younger learners as appropriate. Children should not enter their full name, school, address, phone number, or other identifying information into public or shareable features. Public verification for Kids certificates is optional and should be enabled only by a parent or guardian.

Cookies and similar technologies

TypingTutor.Online and enabled service providers may use cookies, local storage, session storage, service workers, or similar browser technologies to remember preferences, keep progress, maintain sessions, measure site usage, prevent abuse, support reminders, and provide advertising where enabled. Blocking browser storage may prevent some settings, progress, reminders, or analytics controls from working as expected.

Server logs, security, and abuse prevention

Like most websites, the hosting environment may temporarily process or log technical request information such as IP address, browser or user-agent information, requested URL, time, response status, and security-related events. These records may be used to operate the service, troubleshoot errors, protect the site, enforce rate limits, and investigate abuse.

TypingTutor.Online uses technical safeguards such as same-origin checks, rate limits, restricted admin tools, protected server endpoints, and hashed analytics identifiers. No website or storage method can guarantee absolute security.

Data retention

Browser-stored progress remains until you clear it, the browser removes it, an import replaces it, or a site reset control removes it. First-party analytics event and session records are configured for periodic cleanup, with a default retention window of about 365 days in the current system. Hashed visitor summaries, certificate verification records, security logs, backups, and support messages may be kept longer when reasonably needed for verification, continuity, security, recovery, record keeping, or legal requirements.

Your choices

• Use core lessons, tests, games, and tools without creating an account.
• Clear or export locally stored progress where those controls are available.
• Control cookies, local storage, and site permissions through your browser.
• Decline or revoke browser notification permission.
• Choose whether to opt in to occasional certificate-related typing tips and updates; the marketing option is not required to create a certificate.
• Choose whether a Kids certificate is published for cross-device verification.
• Use private/local game scores rather than any future public competition feature.
• Contact us with a privacy question or request concerning information you provided or a certificate record.

Third-party services and external links

TypingTutor.Online may link to or use services operated by other companies, including analytics, advertising, fonts, social-sharing destinations, video or embedded content, and browser/platform services. Those services may process information in other countries and under their own privacy policies. This policy does not control how an external service handles information after you choose to use it.

The TypingTutor.Online Chrome extension has its own extension-specific privacy information on the Extension Privacy page.

Changes to this policy

We may update this policy when TypingTutor.Online features, analytics, service providers, or legal requirements change. The “Last updated” date above shows the date of the current version.

Contact

Privacy questions can be sent through the Contact page or to contact@typingtutor.online.