Privacy Policy

• Account details. Your email address, a hashed password (we never store it in plain text), and the profile fields you choose to set: display name, username, an optional bio, and an optional avatar.
• Practice data. The results of your typing sessions, tied to your account: speed, accuracy, consistency, per-key timings, and error patterns. This is the point of the product, and it is yours.
• Technical data. A session cookie that keeps you signed in, plus your IP address and browser user-agent at sign-in, which we use to run the service and to catch abuse. Basic server logs are kept briefly.
• Social sign-in. If you choose to sign in with Google or GitHub, we receive your email address, name, and avatar from that provider. We do not receive your password with them.

If you practice without an account, your results stay in your browser’s local storage and never reach our servers.

We use one essential cookie: the session cookie that keeps you signed in. We do not use advertising cookies or cross-site tracking, and there is no third-party ad network embedded in the site.

For a basic sense of traffic and page speed, we use Vercel’s privacy-friendly analytics. It is cookieless, does not follow you across sites, and does not collect personal data, so it needs no consent banner. It only tells us, in aggregate, which pages are visited and how fast they load.

• To run the trainer, save your stats, and show the data room: this is necessary to provide the service you asked for (performance of a contract).
• To keep accounts secure and catch implausible or automated results on the leaderboard (our legitimate interest in a fair, working product).
• To send you account emails, such as password resets and email verification (necessary to provide the service).
• To show you on the public leaderboard, only if you turn that on yourself (consent, which you can withdraw at any time in your profile).

We run Polytaipe on a small set of trusted providers, each acting on our instructions:

• Vercel hosts the site and serves it.
• Turso stores the database, in an EU region.
• Resend delivers our account emails, in an EU region.
• Google and GitHub only if you use their sign-in, and only for that.

We do not sell your personal data, and we do not share it for advertising.

Your account and practice data are stored in the European Union, and account emails are sent from an EU region. Hosting is served from a global edge network, so a request may be handled near you, but the source of record stays in the EU.

We keep your account and practice data for as long as your account exists. When you delete your account, we delete your data. You can do this yourself at any time from your profile page, under “Delete account”. It removes your account, sessions, and your full typing history, and it cannot be undone.

If you are in the EU or UK, the GDPR gives you the right to access your data, correct it, delete it, export it, and object to certain processing. You can edit your profile and delete your account directly in the app. For anything else, email us at hello@polytaipe.com. You also have the right to complain to your local data protection authority. In France, that is the CNIL.

Polytaipe is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

If we change how we handle your data, we will update this page and its date. For significant changes, we will do our best to let account holders know.

Questions about your data, or want to make a request? Email us at hello@polytaipe.com.