Privacy Policy

Last updated: January 2025  ·  ittypingtest.io

ittypingtest.io is committed to protecting your privacy. This policy complies with GDPR (UK and EU), CCPA (California/US), PIPEDA (Canada) and the Australian Privacy Act 1988.

We collect only what is necessary to provide the it typing test service:

• Account data — name and email address if you register (optional)
• Typing test results — WPM, accuracy, duration, error count, test mode
• Payment data — processed by Stripe. We never store card numbers. We receive only payment confirmation and amount.
• Certificate data — your name as you entered it, your test result, and a unique verification code
• Technical data — IP address (anonymised after 24h), browser type, country of access for regional leaderboard
• Cookies — session cookie and CSRF security token only. See Section 10.

We do not collect biometric data, keystroke logging beyond the test window, or any health or political information.

• Provide the it typing test, leaderboard, trainer and dashboard
• Issue and deliver your typing certificate PDF
• Allow employers to verify certificates at /verify/{code}
• Display your position on the global leaderboard (by username only)
• Improve anti-cheat detection to ensure fair rankings
• Comply with legal obligations

We never sell your data. We never use your data for advertising.

• Contract — processing your test result and issuing your certificate
• Legitimate interest — anti-cheat, leaderboard, security
• Consent — optional account creation and marketing emails
• Legal obligation — tax records for certificate sales

• Access — request a copy of all data we hold about you
• Rectification — correct inaccurate data
• Erasure — delete your account and all associated data from Settings, or email us
• Portability — receive your data in machine-readable format
• Object — object to processing for legitimate interest purposes

To exercise any right, email [email protected]. We will respond within 30 days.

We are registered as a data controller with the UK Information Commissioner's Office (ICO). If you are located in the EU or EEA, our processing complies with EU GDPR 2016/679. Data transfers outside the UK/EEA are covered by Standard Contractual Clauses.

To lodge a complaint: UK — ICO at ico.org.uk. EU — your local supervisory authority.

Under the California Consumer Privacy Act (CCPA) and CPRA, California residents have the right to know what personal information is collected, the right to delete it, the right to opt out of sale (we never sell data), and the right to non-discrimination.

To exercise CCPA rights, contact [email protected] and state "CCPA Request" in the subject line. We will verify your identity and respond within 45 days.

We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). We collect personal information only with your knowledge and consent. You may withdraw consent at any time. To access or correct your information, contact our Privacy Officer at [email protected].

You may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You have the right to access and correct your personal information. We do not disclose personal information to overseas recipients except where necessary for service provision, with appropriate safeguards.

Complaints may be lodged with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

We use essential cookies only:

• Session cookie — keeps you logged in during your visit
• CSRF token — prevents cross-site request forgery (security)

We use no advertising cookies and no third-party tracking cookies. Your theme preference is stored in localStorage (local to your browser, never sent to us).

• Account data — retained while your account is active, deleted within 30 days of account deletion
• Test results — retained for 2 years or until account deletion
• Certificate data — retained indefinitely (required for employer verification)
• Payment records — retained for 7 years (UK tax law requirement)
• IP addresses — anonymised after 24 hours

• Stripe — payment processing. Your payment data is governed by Stripe's privacy policy.
• OpenAI — AI coach analysis. Test result data is processed per OpenAI's data processing agreement. No personal identifiers are sent.
• Google Fonts — font loading via Google CDN. Google's standard privacy policy applies.

We do not use Facebook Pixel, Google Analytics, or any advertising networks.

Data Controller: IT Typing Test Ltd, London, United Kingdom

Email: [email protected]

ICO registration: pending

For complaints we cannot resolve, you may contact the ICO (UK), your national data protection authority (EU), the OPC (Canada), or the OAIC (Australia).