Privacy notice

Draft pending legal review. This notice describes TypeTrance as it works today; when a feature that changes it ships, this page is updated first.

The short version

• You can use TypeTrance without an account. An account is optional: you need one only for ranked play and subscriptions, and you sign in with Google (see Accounts).
• Your settings, results history and personal bests are stored in your browser (local storage and IndexedDB) and are not sent to us.
• What you type is processed on your device to compute your score; in practice it never leaves your device. Only a ranked run you submit (not open yet) sends its replay, so our server can check the score (see Ranked runs).
• We use no advertising and no third-party trackers. Our own usage statistics are sampled and coarse, never collected during a run, and in the EEA, the UK and Switzerland collected only if you allow them (see Usage statistics). Fonts and all other files are served from our own domain; the one exception is Google's sign-in script, which the account site's sign-in page loads from Google when you sign in.

Who is responsible

ColsonSuperApps LLC, a Wyoming limited liability company with operations in Bharatpur-2, Chitwan, Nepal. Contact: support@colsonsuperapps.com (subject "Privacy").

What is processed, and why

• On your device only: your keystrokes and their timing during a test (to score it), your settings, results history and personal bests. You can delete all of it at any time with Settings → Clear my data or by clearing this site's data in your browser.
• Hosting: TypeTrance is served by Cloudflare. Like any website, delivering a page requires your IP address and standard request information (such as your browser type). Cloudflare processes this on our behalf to deliver and secure the service; we do not use it to identify you or build a profile.

Usage statistics

TypeTrance collects sampled, coarse usage statistics to learn what to improve: which formats are played, whether runs finish, how fast pages load and whether errors occur.

• What is sent. Rounded figures and categories only: the kind of page and device, the kind of site that brought you here (for example a search engine, never its address), the format of a run and its speed and accuracy in ranges, the type of any error, whether you are a guest, signed in or a subscriber, and the sampling rate. Our server adds the country the request came from. No account identifier, IP address, page address, cookie or anything you type is sent or stored with them.
• When. Never during a run: statistics wait until a run is over and are sent from this page to our own server. Only a sample of visits contributes.
• Your choice. In the European Economic Area, the United Kingdom and Switzerland, nothing is collected unless you allow it; elsewhere statistics are collected unless you turn them off. Choose in Settings → Data → Usage statistics. If your browser sends Global Privacy Control, nothing is collected and there is nothing to choose.
• Why and how long. To improve TypeTrance (your consent where it is required, otherwise our legitimate interest in a working, fast product). Cloudflare stores them for us as our processor for about three months, then they are deleted. They are pseudonymous rather than anonymous, so we only ever read totals, never one person's records.

Accounts (optional)

This section applies only if you sign in. Practice, your settings and your history on this device never need an account.

• Signing in with Google. Google confirms your sign-in and tells us an identifier for your Google account. We store that identifier, linked to a random account number. We do not store your email address, your name or your Google profile photo. Google processes your sign-in as an independent controller under its own privacy policy, at policies.google.com/privacy.
• One age question. Before an account is created we ask which age range you are in. We store only the range, the version of our age policy and when you answered, never your birth date. TypeTrance accounts are for adults (18 and older) for now; a younger answer creates no account and stores nothing.
• Your callsign. If you choose one, the name you race under is stored with your account and shown where you take part, such as leaderboards.
• Sessions. We keep you signed in with cookies that are strictly necessary for this: on account.typetrance.com, __Host-acct for your session, and __Host-acct-nonce and __Host-acct-age for a few minutes while you sign in; on typetrance.com, __Host-play and __Host-play-r for signed-in play and its renewal. They are secure, unreadable to scripts and never shared with anyone. We store only a fingerprint (hash) of each session token, so a copy of our database cannot sign anyone in.
• Why, where and how long. To provide the account you asked for (contract) and to keep it secure, for example by ending sessions you sign out of (our legitimate interest). Stored by Cloudflare for us in the United States (Cloudflare D1), until you delete your account; deleting it removes the link to your Google identity, your callsign and your sessions. Records of payments follow Subscriptions and payments.

Ranked runs (not open yet)

Ranked runs are built but not open yet; this section says how they work when they open. Ranked play needs an account; practice never sends anything.

• What is sent. When you submit a ranked run: its result and a replay of the run, meaning what you typed over the text our server issued for it and when each key was pressed. Text you paste is never recorded.
• Why. Our server scores the run again from the replay and checks its timing for signs of automation, so every place on a leaderboard is earned (our legitimate interest in fair competition). A moderator may review a run's timing statistics, never the text you typed; if a run is removed, you are told why and can appeal.
• What is public. A run that makes a leaderboard shows its speed, accuracy and date with your callsign, or as an anonymous typist if your profile is set to "Only me", and the country you chose, if any.
• How long. A replay is kept for 30 days, and longer only while its run holds a best on a leaderboard period that has not ended (plus 7 days; an all-time best keeps its replay while it stands) or awaits review (at most 90 days after it was accepted). Review statistics are reduced after 90 days, or after 365 days for a rejected run, so an appeal can still be checked. Deleting your account removes your leaderboard entries and deletes your replays.

Subscriptions and payments

This section applies only if you buy TypeTrance Plus or Patron, which needs an account (practice never does).

• Stripe processes your payment. Stripe, Inc. and its affiliates collect your card or other payment details, name, email address and billing address on Stripe's own secure checkout page, and screen payments for fraud. TypeTrance never receives your card number. Stripe acts as our payment processor and, for its own legal and fraud-prevention duties, as an independent controller; its privacy policy is at stripe.com/privacy. Where the checkout page names Stripe (through Link) as the seller of record, Stripe also handles the tax on your purchase as the seller.
• What we keep. In our database (Cloudflare D1, in the United States): the Stripe customer and subscription identifiers linked to your account; your plan, its amount, currency and renewal period, and the period dates; whether the subscription is active, cancelled, overdue, refunded or disputed; a record of each payment, refund and dispute (amount, currency, tax, date and status); the version of the subscription terms you accepted and when; and the identifiers of the Stripe notifications that changed it. We do not keep your card details, and your account itself has no email address in our database: Stripe holds the one you gave at checkout to send your receipts and renewal reminders.
• Withdrawals and cancellations. When you withdraw from a subscription or cancel it on our site, we record when your statement arrived and what it said: the contract, the kind of cancellation and any cause or end date you gave, the name and the email address you gave in it, and, if you used the form without signing in, the contract reference you typed. For a withdrawal we also record the payment it refunds and the refund amount. We use this to carry out your statement, to send you the acknowledgement or confirmation, and to prove later what you declared and when (legal obligation; our legitimate interest in being able to show that we honoured it). To show you where we send the acknowledgement, the page reads the name and email address you gave at checkout from Stripe when it loads; we do not store them unless you send the statement. To keep the form without signing in from being flooded, Cloudflare counts requests per IP address for a minute; we do not store IP addresses.
• Why. To provide the subscription you bought (contract), to keep the accounting and tax records the law requires (legal obligation), and to prevent and resolve fraud and payment disputes (our legitimate interest in being paid and not defrauded).
• How long. While your subscription runs, and afterwards for as long as tax and accounting law requires us to keep transaction records; then they are deleted. Records of your consent at checkout and of your withdrawals and cancellations are kept for at least three years, or one year after the subscription ends if that is longer (the period California law sets for consent records, which we apply to all of them); then they are deleted. If you delete your account, these records are kept apart from your profile for that period only.
• In your browser. When you are signed in, TypeTrance keeps a copy of your plan (its name and end date, nothing about payment) in this site's storage, so pages can recognise your subscription at once, for example to show no ads. It is removed when you are signed out or clear this site's data.

Racer profiles (not open yet)

Racer profiles are built but not open yet; this section says how they work when they open. A profile is optional, needs an account, and is for adults.

• What you choose to publish. Your callsign, a display name, a short bio, a cover, a profile picture and an accent colour, and the country you chose for the leaderboards, if any. Your page also shows the month you made it, your best results as the published leaderboards show them, and, only if you publish them, practice figures from your own device (level, runs, time typed, streak and best speeds, marked as not verified). It never shows your Google account, your age range or anything about payment.
• Who sees it. "Everyone" makes your page public and shows your callsign on the leaderboards. "Only me" hides your page from everyone else and shows you as an anonymous typist on every leaderboard, past periods included. Your page asks search engines not to index it.
• Photos and covers. If you upload your own, we keep the part of the image you chose, re-encoded, with location and camera data removed; the file you uploaded is not kept. A moderator looks at each image before anyone else can see it. Cloudflare processes and stores the images for us (Cloudflare Images and R2).
• Reports and moderation. Anyone can report a profile. A report records what it is about, any note, what the profile showed at that moment and, if the person reporting is signed in, their account; never an IP address. A moderator may remove or hide parts of a profile; you see the reasons in your profile settings and can ask for another review.
• Why and how long. To publish the page you asked for (contract) and to keep profiles safe for everyone (our legitimate interest, and our duties as a host). Until you delete the profile or your account, which removes the page, its images and your published figures at once; your callsign then stays reserved for 30 days so nobody can take it to pose as you. Images a moderator rejected or removed are kept for 30 days for a possible appeal, then deleted. Reports are deleted a year after their decision and moderation decisions after three years. Copies other people saved, or that are still in their browser, cannot be recalled.

Cookies and similar storage

TypeTrance does not set advertising or analytics cookies. It uses your browser's storage to remember your settings and your own history on your device, which is strictly necessary for the features you use, and your usage-statistics choice. Where usage statistics are on and allowed, this visit's statistics wait in the tab's session storage until they are sent; Settings → Clear my data deletes them, and keeps a choice to turn them off. If you sign in, the session cookies listed under Accounts are set; they are strictly necessary and used for nothing else.

Children

TypeTrance is a general-audience tool and is not directed to children. Practice requires no personal information. Accounts are for adults (18 and older) for now.

Your choices and rights

Because your data stays on your device, you control it directly: view it in the app, export or delete it from Settings, turn usage statistics on or off in Settings → Data, or clear site data in your browser. If you have an account, you can delete it yourself from your account page at any time; if a subscription would still renew, cancel it first on the billing page (one that is set to end does not stand in the way). If you have a question or a request under the privacy laws that apply to you, email us and we will respond within the time those laws require.

Changes

We will update this notice before any change in how data is handled takes effect, and show the date of the last change at the top of the page.