Privacy Policy

This Privacy Policy explains how TypeLords ("we", "us"), the operator of typelords.com, collects, uses, stores, and shares your personal information when you use our service.

We're a small team. We try to collect as little as possible, keep what we collect secure, and never sell it.

1. Who we are

TypeLords is an online typing platform operated from India.
Contact: ping@typelords.com

TypeLords is the Data Fiduciary for purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act") and the Data Controller for purposes of the EU General Data Protection Regulation ("GDPR") where applicable.

Payments for TypeLords Pro are collected and invoiced through Pexels360 Solutions LLP, Goa, India, which handles billing, invoicing, and tax records for those payments.

2. Age requirement

TypeLords is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. By creating an account, you confirm that you are at least 18 years old.

This applies to everyone, including learners assessed through an institute or company account. Institutes must not invite or assess anyone under 18.

If we learn that we have inadvertently collected personal information from a person under 18, we will delete that account and the associated data promptly. If you believe a minor has registered, write to ping@typelords.com and we will act within 30 days.

3. What we collect

Information you give us

• Account information — your name, email address, and country (auto-detected from your IP at signup, editable from the console).
• Authentication data — if you sign in with Google, we receive your Google email, name, and profile picture URL; we do not access anything else from your Google account. If you sign in with email, we send a one-time code to verify the address.
• Profile information — your chosen avatar (from our preset set), any custom handle you claim, and any profile-privacy preference you toggle.
• Support correspondence — anything you send us by email at ping@typelords.com.
• Institute information — if you register an institute or company account, the organisation name and the contact details you provide for it.

Information we generate from your use

• Activity results — for each completed typing run across our activities (including TypeWars, TypeLegends, TypeAcademy, TypeCareers, TypeTest, TypePractice, TypeH2H, and TypeGames): words-per-minute, accuracy, consistency, duration, correct/incorrect character counts, and the timestamp of the run.
• Progression data — your current rank stage, current level, total activities completed, TL Coin balance and the ledger of coin movements, and certificates earned.
• Session data — a server-side session token (hashed before storage) with a sliding 30-day expiry, used to keep you signed in.
• Anti-cheat telemetry — for completed typing runs we capture per-keystroke timing metadata, run-level events (paste, blur, etc.), and a coarse device fingerprint (browser, OS, screen size, timezone, language, platform). This data is examined for cheating signals; if no signals fire, nothing is persisted. If one or more signals fire, the telemetry and device fingerprint are stored for admin review under our anti-cheat program. We do not collect IP addresses, geolocation, or canvas/audio fingerprints for this purpose.
• Referrals — if you arrived via a referral link, we record which existing user referred you. If you invite others, we record the invitations you generate.

Payment information (TypeLords Pro)

If you purchase TypeLords Pro, your payment is processed by our payment providers — PayU for payments from India and PayPal for international payments.

• We never see or store your card or banking details. Those are entered with, and held by, the payment provider.
• We store a record of the transaction: the amount, currency, provider, transaction reference, status, timestamp, and the plan purchased, linked to your account.
• We generate an invoice for each payment, containing your name, email address, and country, and email it to you.
• We store your Pro expiry date so we know when your benefits start and end.

Information collected automatically

• Country — we infer your country from your IP at signup to set the default for invoicing and language preferences. We do not retain raw IP addresses.
• Usage and conversion measurement — we use Google Analytics 4 to understand in aggregate how the site is used, and Google Ads conversion tracking to measure the effectiveness of any advertising we run. Both place cookies set by Google. See Section 6 for details.

4. How we use your information

• To create and operate your account.
• To run the typing activities — serving passages, recording results, ranking participants, awarding TL Coins, advancing your rank journey, issuing certificates.
• To process payments for TypeLords Pro, apply your Pro benefits, issue invoices, send you a renewal reminder before your plan ends, and meet our tax and accounting obligations.
• To operate the institutes and companies facility, including showing learners' assessment results to the administrators of the institute that assessed them (see Section 7).
• To send you essential account emails: a sign-in code, a welcome email on signup, a confirmation if you change your email address, rank and reward notifications, and Pro purchase and expiry emails. We do not send marketing emails.
• To detect and review cheating attempts via the anti-cheat program described above. Confirmed cheats may result in certificate revocation and account suspension or disabling.
• To analyse aggregate, non-identifying usage patterns so we can improve the product.
• To comply with applicable legal obligations.

5. Legal basis for processing

For users covered by the DPDP Act (India), we process your data on the basis of your consent given at signup, except where another lawful ground applies (e.g. compliance with tax laws).

For users covered by the GDPR (EU/EEA/UK):

• Contract — operating your account, running the typing activities, and providing and billing TypeLords Pro.
• Legal obligation — retaining invoices and transaction records for tax and accounting purposes.
• Legitimate interests — anti-cheat detection, aggregate analytics, security, fraud prevention.
• Consent — Google Ads conversion tracking and any future non-essential cookies.

6. Cookies and similar technologies

We use cookies only where necessary to provide the service or where you have consented. Categories:

• Essential — your session cookie. Without it you cannot stay signed in. No consent is required for essential cookies.
• Measurement — the Google Tag, which powers Google Ads conversion tracking (did an ad lead to a signup) and Google Analytics 4 (aggregate usage, so we can improve the product). Both set cookies controlled by Google. We show a cookie banner in the EU/EEA/UK and record your preference; these tags currently load on page load, before that preference is applied, and we are working to align the two. You can have them removed by writing to us, or block them in your browser.

We do not use advertising-network cookies beyond the Google tags above, social-media tracking pixels, session recording, or cross-site behavioural tracking. Our Cookie Policy lists every cookie individually.

7. Institutes and companies

TypeLords offers a facility that lets an institute or company create typing assessments and review the results of learners who take them. If you take an assessment through an institute's link, or pass a test via an institute's co-branded link, you should know:

• What the institute sees: your name as it appears on your TypeLords account, the name of the test, your words-per-minute, your accuracy, whether you passed and against what targets (or your grade), the certificate reference where one was issued, and the date you took it.
• What the institute does not see: your email address, your password or sign-in details, your TL Coin balance, your Journey progress, or your results from any other activity on TypeLords that was not taken through that institute.
• A certificate issued through an institute may carry that organisation's name alongside ours.

The institute decides who to assess and why, and is responsible for telling its learners that it will see these results and for having a lawful basis to process them. We provide the facility. If you have a question about why an organisation assessed you, ask that organisation first; you can also write to us at ping@typelords.com.

8. Sharing your information

We never sell or rent your personal information. We share it only with the following categories of service providers, and only as needed for them to do their job for us:

• Vercel (USA) — application hosting.
• Neon (USA/EU) — managed PostgreSQL database.
• Cloudflare (USA, global) — DNS and CDN.
• Resend (USA) — transactional email delivery (sign-in codes, welcome, email-change confirmations, reward and Pro emails, support replies).
• Google (USA) — Sign-In with Google, Google Analytics 4 usage measurement, and Google Ads conversion measurement.
• PayU (India) — payment processing for payments made from India.
• PayPal (USA, global) — payment processing for international payments.

We also share assessment results with the institute that assessed you, as described in Section 7.

We will disclose your information if required by a valid legal process (court order, government order, applicable law) and only to the extent strictly required.

9. International data transfers

Some of the service providers above are located outside India and the EU. Where personal data is transferred to such providers, we rely on the providers' own appropriate safeguards (e.g. EU Standard Contractual Clauses, equivalent contractual protections) and process data only as needed to operate the service.

10. How long we keep your data

• Account and activity data — for as long as your account exists. Delete your account by writing to ping@typelords.com.
• Session tokens — up to 30 days from last use, after which they expire automatically.
• Suspect-signal telemetry — up to 12 months after the signal is reviewed, then purged.
• Payment records and invoices — retained for as long as required by Indian tax and accounting law, which is currently several years, even if you delete your account. This is a legal obligation and cannot be waived on request.
• Assessment results shared with an institute — the institute retains its own copy of results for its learners. Deleting your TypeLords account removes the data we hold; ask the institute directly about the copy it holds.
• Email logs— per our email provider's retention (Resend, currently a rolling window of recent deliverability data).

When you delete your account, your name, profile, runs, journey, coins, and referrals are removed, except where we are legally required to retain a record (see payment records above).

If your account is disabled rather than deleted — for example while we investigate a breach of our Terms — you are signed out and cannot sign in, but your data is retained until the matter is resolved or the account is deleted.

11. Your rights

Subject to applicable law, you have the following rights over your personal information:

• Access — request a copy of the personal data we hold about you.
• Correction — fix anything inaccurate. Most profile fields are directly editable from your console; for anything else, email us.
• Deletion — close your account and erase your personal data, subject to retention obligations we are legally required to honour.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent — at any time, without affecting the lawfulness of processing carried out before withdrawal.
• Object — to processing based on legitimate interests (where GDPR applies).
• Lodge a complaint — with the Data Protection Board of India (under DPDP), or your local data protection authority (under GDPR).

To exercise any of these rights, email us at ping@typelords.com from the address associated with your account. We will respond within 30 days.

12. Security

We use industry-standard measures to protect your data: encrypted transport (HTTPS everywhere), encrypted storage at rest in our database, hashed session tokens, bcrypt-hashed admin credentials, 2FA on admin access, and least-privilege service credentials. Card details never reach our systems.

No system is perfectly secure. If a personal data breach materially affects you, we will notify you and the Data Protection Board of India (and your supervisory authority under GDPR, if applicable) without undue delay.

13. California residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect, the right to delete personal information, the right to correct inaccurate personal information, and the right to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under the CCPA. To exercise your rights, email ping@typelords.com.

14. Changes to this policy

We update this policy when our practices change. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated by email to active users.

15. Contact

Questions, concerns, or requests: ping@typelords.com.