Privacy
Typing on typesilk needs no account. Without one, your runs, settings and profile stay in your browser and never reach our database.
Who is responsible
Johannes Grof, Mettersdorf am Saßbach, Austria, contact@johannesgrof.me.
If you sign in
Signing in with GitHub or Google is optional. Without it you only miss the leaderboard. We store:
- the account id your provider gives us, which tells us it's you again
- the username and display name you choose, both public on the leaderboard
- your ranked daily runs: speed, accuracy, duration, date and a fingerprint of the keystrokes that catches copied runs
- a hash of your session token
We don't ask for your email address. We don't store your real name or photo from Google, or your picture from GitHub. If your GitHub profile has a public name, we suggest it as your display name and you can change it before anything is public. Your keystrokes are sent to check a run and then discarded.
We process this to provide the leaderboard you asked for (Art. 6(1)(b) GDPR). Runs that look automated are hidden from the board automatically. If that happens to you by mistake, write to us and a person will look at it.
How long we keep it
Account data and ranked runs stay until you delete your account. Sessions end after 30 days or when you sign out. Deleted data can remain in database backups for up to 30 days.
Cookies and browser storage
Signing in sets two cookies that the sign-in can't work without: one for up to 10 minutes during sign-in, and one for up to 30 days that keeps you signed in. Your browser also keeps your settings and stats in local storage. There are no ads, no analytics and no tracking cookies. Fonts are served from this site.
Who processes the data
The site and database run on Cloudflare, which acts as our processor under its data processing addendum. It handles your IP address and request data to deliver the site, limit abuse and keep it secure (Art. 6(1)(f) GDPR). Cloudflare can process data outside the EU, including in the US, where it's certified under the EU-US Data Privacy Framework.
During sign-in, GitHub or Google handles your login as its own controller under GitHub's or Google's privacy policy. We don't share your data with anyone else or sell it.
Deleting your data
Your profile page has a delete account button. It removes your account and ranked runs straight away. Your local stats are separate: clear this site's data in your browser or use the reset in settings.
Your rights
You can ask for access, correction, deletion, restriction or a copy of your data, and object to processing. Write to the address above. You can also complain to the Austrian data protection authority (dsb.gv.at).