Last updated: 24 July 2026
1. Who we are
ittypingtest.io ("we", "us") provides a free online typing speed test, typing trainer, leaderboard and paid typing certificates. This policy explains what personal information we collect from visitors in the United Kingdom, the European Union, the United States, Canada, Australia and elsewhere, how we use it, and the rights you have over it.
2. What information we collect
- Account data — when you create an account we collect your name and email address. These are required to save your typing results and to issue certificates in your name.
- Typing results — your test statistics (WPM, accuracy, duration, language and timestamps) are stored against your account so your dashboard, streaks and leaderboard position work.
- Certificate & payment data — when you purchase a certificate, payment is processed entirely by Stripe. We never see or store your full card number. We store the payment reference, amount, date and your certificate details (name as printed, verification code, WPM and accuracy certified).
- Technical data — IP address and browser user-agent are recorded with test sessions for anti-cheat integrity checks and security.
3. How we use your data
We use your information to: operate the typing test and your dashboard; generate and email your certificate and payment receipt; display your first name on the public leaderboard (you may compete anonymously by not signing in); prevent abuse and cheating; and comply with legal obligations. We do not sell your personal data and we do not use it for third-party advertising.
4. Legal bases (GDPR / UK GDPR)
We process account and result data to perform our contract with you; payment records to meet legal obligations; and integrity/security data under our legitimate interest in keeping the leaderboard fair.
5. How your data is protected
All traffic is encrypted with HTTPS/TLS. Passwords are stored only as strong one-way hashes (bcrypt). Payment card details are handled solely by Stripe, a PCI-DSS Level 1 certified processor. Access to personal data is restricted to authorised administrators.
6. How long we keep it
Account data is kept while your account is active. Certificates and payment records are retained for as long as verification service is offered and as required by tax law. If you delete your account, your personal data is permanently removed (see section 8).
7. Sharing
We share data only with the service providers needed to run the site: Stripe (payments) and our email delivery provider (receipts and certificates). These providers act under their own strict privacy obligations. We may disclose data if required by law.
8. Your rights
Depending on your location (GDPR, UK GDPR, CCPA/CPRA, PIPEDA, Australian Privacy Act) you have the right to: access the data we hold about you; correct it; delete it ("right to be forgotten"); export it (portability); object to or restrict processing; and to lodge a complaint with your supervisory authority. You can delete your account and all associated data yourself at any time from your dashboard — the deletion is permanent and cannot be undone. For any other request, email [email protected]; we respond within 30 days.
9. Children
The service is not directed at children under 13 (or under 16 where local law requires), and we do not knowingly collect their data.
10. Changes
We will post any changes to this policy on this page and update the date above.