Skip to content
Menu
Choose languageen

Sign in to keep your progress

With an account, your progress is available on all your devices. Everything works the same without one – just locally.

or with an email link

Privacy policy

This page explains which personal data is processed when you use typando, why we need it, where it is stored, and what rights you have.

Summary

  • typando works without an account. In that case, your practice progress stays in your browser and is never sent to us.
  • We use no cookies for analytics or advertising and show no ads. We count how often our pages are visited without cookies and without user profiles.
  • An account is optional. With an account, we store your email address and your learning progress in a database in Zurich.
  • We never store individual keystrokes, only the summarized results of an exercise.
  • A diploma or certificate is created only when you start its test yourself and pass it; anyone who has the link can open its page.

Controller

Reto Pontoni
Elfenweg 3
8472 Seuzach
Switzerland
Email: info@typando.com

For any privacy question, contact us at info@typando.com.

Visiting the website

The website is hosted by Vercel: Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA (Vercel privacy notice). Vercel delivers the pages through a global network and routes your request to a nearby data center, in Europe for example in Frankfurt, Paris, Dublin, London, or Stockholm. In doing so, Vercel processes technically necessary data: IP address, the approximate location derived from it, date and time, the requested address, and information about your browser and operating system. This data is used for delivery, troubleshooting, and protection against abuse.

The legal basis is our legitimate interest in delivering the website securely and reliably (Art. 6(1)(f) GDPR).

Practicing without an account

Without an account, typando stores everything locally in your browser’s storage (localStorage): your lesson progress, the results of your exercises and tests (type of exercise, speed, accuracy, duration, summarized errors per key, and two measures of your typing rhythm), the days on which you practiced, your speed goal, and your settings (keyboard layout, Mac keyboard, on-screen keyboard, color scheme, daily goal). The minutes of your current practice session are kept only until you close the tab. This data does not leave your device. You can delete it at any time by removing typando’s site data in your browser.

This storage requires no consent because it is strictly necessary for the service you requested (Section 25(2) no. 2 of the German TDDDG). We do not set cookies for it.

Account and learning progress

You only need an account if you want to use your progress on several devices. The database and sign-in are run by Supabase: Supabase Pte. Ltd., 65 Chulia Street #38-02/03, OCBC Centre, Singapore 049513 (Supabase privacy policy). Our project data is stored in the Zurich data center (Switzerland).

There are three ways to sign in: with a link by email (see “Sign-in emails”), with your Google account, or with your Microsoft account, such as the one from your school or company.

When you sign in with Google, Google learns that you are signing in to typando and passes us your email address, your name and your Google account ID; we have no access to any other data in your Google account. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google privacy policy). Google processes the sign-in under its own responsibility and its own privacy policy, which we have no influence over. On our side, the legal basis is the same as for the email link: providing the sign-in you requested (Art. 6(1)(b) GDPR).

When you sign in with Microsoft, Microsoft learns that you are signing in to typando and passes us your email address, your name and your Microsoft account ID; we have no access to any other data in your Microsoft account. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (Microsoft privacy statement). Microsoft processes the sign-in under its own responsibility and its own privacy statement, which we have no influence over. On our side, the legal basis is the same as for the email link: providing the sign-in you requested (Art. 6(1)(b) GDPR).

With an account, we store:

  • your email address and the language you signed in with (for the sign-in emails), and if you sign in with an account from another provider (see above), also your name and the ID of that account,
  • your settings (keyboard layout, Mac keyboard, daily goal), your speed goal with its time frame and starting speed, your name for the diploma and certificates, whether you skipped the basics, and your account plan,
  • your lesson progress and the results of your exercises and tests: time, type of exercise, lesson, speed, accuracy, duration, number of characters, corrected and uncorrected errors, summarized error and timing values per key and key pair, and two measures of your typing rhythm (how even your intervals were and how often two keystrokes overlapped),
  • the days on which you practiced, with the number and duration of your exercises (for your streak, daily goal, and practice calendar),
  • your diploma and certificates, as soon as you pass a test for one (see the next section).

We do not store raw data of individual keystrokes. To keep you signed in, Supabase places a session key in your browser’s storage. When you sign in for the first time, we move your existing progress from the browser into your account and delete the local copy only once that has succeeded.

The legal basis is providing the account you created (Art. 6(1)(b) GDPR). We keep the data for as long as your account exists. The next section explains how to delete your account.

Diploma and certificates

With an account, you can take the final test for the diploma and the certificate test. If you pass, we issue the document right away. Before your first test, you enter a name; it is stored in your profile and copied into the document when it is issued.

Every document has its own page, and its address contains the document number, made up of the year and six random characters. That page is public: anyone who has the link sees the name, the type of document (diploma or certificate level), the language and keyboard layout, the date and number, and the results of the test (speed, characters per minute, accuracy, and duration), but neither your email address nor your other exercises. We ask search engines not to index the page (noindex). You decide who gets the link. Your browser creates the PDF file itself; no data is sent for this.

The legal basis is providing the document you requested by taking the test (Art. 6(1)(b) GDPR). If you change your name later, documents already issued stay as they are. Your diploma and certificates exist for as long as your account does and are deleted with it. If you want a single document removed, write to info@typando.com.

Deleting your account

You can delete your account yourself at any time: sign in, open the account menu at the top right, and choose “Delete account”. Once you confirm, we immediately and permanently delete your sign-in data, your profile with its settings, your lesson progress, your exercises, your practice days, and your diploma and certificates; their verification pages stop working afterwards, and none of this can be undone. In the encrypted backups, your data remains for up to 30 more days (see “Backups”). Anything stored only in your browser, such as exercises without an account or your color scheme, stays there until you remove typando’s site data in your browser.

If you prefer to request deletion by email, write to info@typando.com.

Sign-in emails

To sign you in, we send you a link by email. Resend handles the delivery: Plus Five Five, Inc. (Resend), 2261 Market Street #5039, San Francisco, CA 94114, USA (Resend privacy policy). For this, Resend processes your email address, the content of the message, and delivery information. The messages are sent via servers in Ireland; account and delivery data such as the recipient address, time, and delivery status are stored by Resend in the USA.

The legal basis is providing the sign-in you requested (Art. 6(1)(b) GDPR).

Backups

So that nothing is lost in a technical failure, we back up the database once a week. The backup is created by an automated workflow at GitHub: GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA (GitHub privacy statement). It reads the database, encrypts the export immediately (AES-256), and stores only the encrypted file; the unencrypted version is deleted in the same run. A backup contains the account data listed above and is deleted automatically after 30 days. GitHub processes the data in the USA.

The legal basis is our legitimate interest in protecting your data against loss (Art. 6(1)(f) GDPR).

typando’s fonts are delivered with the website; your browser does not connect to any external font service. Our articles link to studies and other websites. If you follow such a link, the privacy policy of that provider applies.

Audience measurement

To see which pages are used, we use Vercel Web Analytics from Vercel, which also hosts the website (see above). When you open a page, Vercel processes the requested address without query parameters, the page you came from, the time, your browser, operating system, and device type, as well as the country, region, and city derived from your IP address. We do not set cookies for this. To count visits, Vercel creates a hash from the request that expires after 24 hours, so no profile across several days or websites is created. We only see aggregated figures, which we can access for up to 24 months depending on the plan.

The legal basis is our legitimate interest in improving the website based on aggregated usage figures (Art. 6(1)(f) GDPR).

Transfers to other countries

Vercel, Resend, and GitHub are based in the USA, Supabase in Singapore. Resend stores delivery data in the USA and GitHub stores the backups; for Vercel and Supabase, access from the country of their head office cannot be ruled out.

Vercel and GitHub are certified under the EU-U.S. and Swiss-U.S. Data Privacy Framework, Resend under the EU-U.S. Data Privacy Framework. Beyond that, transfers are based on the European Commission’s standard contractual clauses in the providers’ data processing agreements, supplemented for Switzerland by the requirements of the Federal Data Protection and Information Commissioner.

Your rights

You have the right to access your data, to have it corrected, deleted, or its processing restricted, to receive your data in a common format, and to object to processing based on our legitimate interest. These rights apply under the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP). To exercise them, write to info@typando.com.

You can also lodge a complaint with a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, the authority in your country of residence.

We do not use automated decision-making or profiling.

Changes

When typando changes, we update this policy. The version published here applies.