Legal & Policy Documentation

Privacy Policy

Effective Date: September 23, 2026 | Platform Version: TypingYard 2.4

1. Commitment to Privacy & Data Minimisation

At TypingYard (typingyard.com), we prioritize user privacy, data protection, and transparency. We strictly adhere to data minimisation principles. Visitors can freely access typing tests, speed exercises, games, and reference articles without creating an account or disclosing personal identification information.

This Privacy Policy applies to all services, web tools, mock examinations, and applications provided under the TypingYard domain. By using our website, you consent to the data collection and usage practices described in this policy.

2. Information We Store Locally vs. Server Processing

Stored Client-Side (Browser Local Storage Only)

  • • Practice test performance history (WPM, Net WPM, accuracy, errors, duration)
  • • Visual UI theme preference (Dark Mode / Light Mode)
  • • Sound and tactile audio feedback toggles
  • • Custom passage inputs and keyboard layout toggles (QWERTY, Mangal Inscript, Remington)
  • • Session milestones and personal score records

* Local storage data remains exclusively on your device and is never transmitted to any advertising networks.

Server-Side Information (Security & Accounts)

  • • Optional account profile credentials (Display Name, Email, cryptographically salted password hash)
  • • Transient server access logs (IP address, browser User-Agent, request timestamp) strictly for DDoS mitigation, rate limiting, and infrastructure diagnostics
  • • Custom mock exam room definitions (exam title, custom passage, target duration, invitation codes)
  • • Support desk contact submissions (Name, Email, message content) to respond to inquiries

3. Artificial Intelligence (AI) Features & Third-Party Processing

TypingYard provides interactive AI-powered speed coaching and automated passage generation through secure API integration with Google Gemini:

  • Zero PII Transmission: When you request AI coaching or practice passages, only non-personally identifiable telemetry (e.g. typing speed numbers, accuracy percentages, error keys, or general topic category names) is sent to the backend proxy. No personal names, email addresses, or account identifiers are transmitted to third-party AI models.
  • No Model Training: Prompt data submitted via our enterprise API integration is processed ephemerally and is NOT used to train, retrain, or improve foundational third-party machine learning models.
  • Offline Diagnostic Fallback: In the event of API outages or offline usage, TypingYard automatically falls back to client-side rule engines without external network transmission.

4. Zero Third-Party Data Monetization & No Sale of Data

TypingYard does NOT sell, rent, trade, lease, or monetize your personal information to third-party data brokers, marketing agencies, or behavioral advertising platforms. We do not deploy third-party retargeting pixels, social tracking beacons, or cross-site tracking cookies.

In the preceding twelve (12) months, TypingYard has not sold or shared any personal information for cross-context behavioral advertising purposes under the California Consumer Privacy Act (CCPA/CPRA) or equivalent global privacy legislation.

5. Data Retention & Security Controls

We implement industry-standard technical and organizational security controls, including TLS 1.3 / HTTPS encryption in transit, strict HTTP security headers (nosniff, frame-ancestors, CSP), and rate limiting. Server access logs are automatically rotated and purged after 30 days. User accounts and exam room data are retained only as long as actively maintained by the creator or until a deletion request is received.

6. Your Rights Under GDPR & UK GDPR

For users located in the European Economic Area (EEA) and the United Kingdom, our legal bases for processing data under Article 6 of the General Data Protection Regulation (GDPR) include Legitimate Interests (Article 6(1)(f)) for platform security, anti-DDoS rate limiting, and technical functionality, as well as Consent (Article 6(1)(a)) where explicitly requested.

You maintain the following enforceable statutory rights: Right to Access (Art. 15), Rectification (Art. 16), Erasure ("Right to Be Forgotten", Art. 17), Restriction of Processing (Art. 18), Data Portability (Art. 20), and Right to Object (Art. 21).

7. California Privacy Disclosures (CCPA & CPRA)

Under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), California residents are entitled to notice at collection regarding personal information categories collected, business purposes, and retention periods. TypingYard does NOT sell or share personal information, nor do we collect sensitive personal data such as social security numbers or financial details.

To exercise your privacy rights, submit a verified request to privacy@typingyard.com. We respond within 30 days.

8. Children's Online Privacy Protection (COPPA & Global Protection)

TypingYard is designed as a safe, educational keyboard practice tool for learners of all ages. However, we do not knowingly collect, store, or solicit personal information from children under 13 years of age (or under 16 in the European Union) without verified parental or educational authority authorization.

9. International Data Transfers & Policy Updates

Our server infrastructure may route technical network traffic through global edge content delivery networks (CDNs). By accessing our services, you acknowledge such routing under standard contractual protections. We reserve the right to amend this Privacy Policy periodically. Substantive updates will be published with an updated Effective Date.