Privacy policy

This policy explains what TypingForest collects, why, how long we keep it and the choices you have. We wrote it in plain language. Last updated: November 2026.

Who we are

TypingForest.com is a typing tutor made in Nepal. We are responsible for the personal data described here. You can reach us at any time through the contact page.

What we collect

• Account details: your name, username, email address, password (stored only as a secure hash), country, time zone, main language, experience level and goal, and the short bio you choose to add.
• Practice results: speed, accuracy, test length, which characters you miss most, lesson progress, badges, XP, streaks, league results, game scores and exam practice scores.
• Contest and race data: for fair play we keep the timing of your keystrokes in contests and races, so results can be checked for automated typing. We only record what you type into our practice boxes, never anything else on your device.
• Technical data: your IP address and browser details in our server logs, the type of device (desktop or mobile) for separate leaderboards, and the cookies described below.
• Messages: what you send us through the contact form.

Why we use it, and our legal bases

• To run your account and the service (contract): saving results, lessons, certificates, leaderboards, contests and classes.
• To keep the site safe and fair (legitimate interests): preventing abuse, checking contest results and protecting accounts.
• To improve the site (consent): anonymous analytics, only if you allow it.
• To show ads (consent for personalised ads): ads keep TypingForest free. Without your consent, ads are not personalised.
• To send emails: account emails such as password resets, and the optional weekly progress email, which you can switch off in your profile or with one click in any email.

Cookies and local storage

• Essential: a session cookie that keeps you signed in, a security token against forged requests, and settings saved in your browser (theme, keyboard, level). These are always on because the site cannot work without them.
• Analytics (optional): Google Analytics, loaded only after you allow it.
• Advertising (optional personalisation): Google AdSense. Personalised ads are only shown with your consent. Learn how Google uses data at policies.google.com/technologies/partner-sites.

Change your choices at any time with Cookie settings at the bottom of every page. We honour the Global Privacy Control signal sent by your browser.

Who can see your data

• Other users see your name, username, country, speeds and badges on leaderboards and contests. If your profile is public, they can also see your profile page. You can make your profile private in your settings.
• Your teacher, if you join a class, sees your practice progress in that class.
• Service providers who help us run the site: our web host, our email provider, and Google for analytics and ads as described above. They may only use the data to provide their service to us.

We do not sell your personal data. Personalised advertising may count as "sharing" under California law; you can opt out with the Do not sell or share my personal information link at the bottom of every page.

International transfers

Our servers and some providers may be outside your country. Where the law requires it, transfers are protected by standard contractual clauses or equivalent safeguards.

How long we keep it

• Your account and practice history: until you delete your account.
• Contest keystroke timing: as long as the contest result is kept.
• Server logs: a short period, normally no longer than 30 days.
• Contact messages: as long as needed to answer you, then deleted.

Your rights

Wherever you live, you can:

• Get a copy of your data: Settings → Your data → Download my data.
• Correct it: edit your profile at any time.
• Delete it: Settings → Your data → Delete my account. This removes your account and everything linked to it.
• Withdraw consent for analytics or personalised ads with Cookie settings.
• Object to or ask us to restrict a use of your data, through the contact page.

European Union and United Kingdom (GDPR, UK GDPR): you also have the right to data portability and to complain to your local data protection authority.
California (CCPA/CPRA): you have the right to know, delete, correct, and opt out of sale or sharing. We will not treat you differently for using these rights.
Brazil (LGPD), India (Digital Personal Data Protection Act 2023), Nepal (Individual Privacy Act 2075) and other countries: you have the rights your local law gives you. Contact us and we will respond within the time the law requires, normally within 30 days.

Children

You must be at least 13 to create an account. In the EU and UK, if you are under 16, a parent or guardian must agree. Schools using classes are responsible for getting any consent their students need. If you believe a child has given us data without the required consent, contact us and we will delete it.

Security

Passwords are hashed, the site uses HTTPS, staff access is limited by role, and admin-written content is cleaned of unsafe code. No system is perfectly secure, so please use a unique password.

Changes

If we change this policy in a way that matters, we will update the date at the top and, for big changes, tell signed-in users on the site.