Privacy policy

Last updated: 12 October 2026.

This policy explains what information TypingSpark handles, where it is kept and the choices you have. TypingSpark is designed to collect as little as possible.

1. Information kept in your browser

Your test results, per-key statistics, lesson progress, game scores, goals and settings are stored in your browser's local storage on your device. Without an account they are not sent to TypingSpark. Text you paste for practice always stays in your browser. You can export or delete this data at any time on your progress page; clearing your browser data also removes it.

2. Optional accounts

Accounts are optional. If you create one, we store your username, a scrambled (hashed) version of your password and of your recovery code, the date you joined and last used the account, and a copy of the progress described above, so you can continue on any device. We never ask for an email address, real name or date of birth, and we suggest a username that does not identify you. Typed passages are not stored, only the summary figures and per-key statistics.

A sign-in cookie keeps you signed in for up to 60 days. You can download your progress at any time, and you can delete your account on the account page; the account and its saved progress are removed from our server immediately (backups are overwritten within 30 days). Accounts not used for two years are deleted automatically.

3. Information our server handles

Like any website, our server receives your IP address and browser details in order to send you pages. We do not create accounts or profiles. The application keeps short-lived counters (for example, how many pages were served since the last restart) that are not linked to individuals, and it does not write access logs containing IP addresses. Error messages may be logged without personal data.

Result codes and certificates. When you create a result code or certificate, your browser sends the figures you chose to include (such as net WPM, accuracy, test length, date and the name you typed) to our server, which signs them and sends them back. When someone verifies a code, the code is sent to our server to check the signature. We do not store the codes, names or figures.

4. Advertising

TypingSpark uses Google AdSense to show ads. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this and other sites on the Internet.

You can opt out of personalised advertising in Google's My Ad Center, and opt out of some third-party vendors' use of cookies for personalised advertising at aboutads.info or, in Europe, youronlinechoices.eu. Learn more about how Google uses information from sites that use its services.

Visitors in the European Economic Area, the United Kingdom and Switzerland are asked for consent through Google's certified consent message before personalised ads or advertising cookies are used. Visitors in US states with privacy laws can opt out of the sale or sharing of personal information through the privacy choices link in the footer. Pages likely to be used by students (lessons, games and teacher pages) request non-personalised ads only, and assignment and class report pages show no ads.

5. Children

TypingSpark can be used by children, including in classrooms. Children never need an account. If they create one, only a username and password are asked for, and we recommend a username that is not their real name. A parent, guardian or teacher can delete the account on the account page or by contacting us. Student assignment pages ask only for an optional name or initials, which stays in the student's browser and in the result code the student chooses to send to their teacher. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.

6. Your rights

Depending on where you live (for example under Canada's PIPEDA and Quebec's Law 25, the EU and UK GDPR, or US state privacy laws), you may have the right to access, correct or delete personal information, to object to or restrict processing, and to withdraw consent. You can export your progress on your progress page and delete your account on the account page yourself. For anything else, contact us using the details below. You can also complain to your local data protection authority.

7. Security

All traffic uses HTTPS. The site uses a strict Content Security Policy and runs in an isolated, read-only container.

8. Changes

If this policy changes, the date at the top will change. Significant changes will be noted on the home page.

9. Contact

Email: INFO@rhmc.ca
Operator: RHMC