Last updated: March 2026
Emanuel Schmacher
Email: support@typr.fun
Full contact details can be found in our Legal Notice.
The following overview summarizes the types of data processed and the purposes of their processing:
Below you will find an overview of the GDPR legal bases on which we process personal data:
| Legal basis | Description |
|---|---|
| Consent (Art. 6(1)(a) GDPR) | The data subject has given their consent. |
| Performance of contract (Art. 6(1)(b) GDPR) | Necessary for the performance of a contract or pre-contractual measures. |
| Legitimate interests (Art. 6(1)(f) GDPR) | Processing is necessary for the purposes of legitimate interests. |
We take appropriate technical and organizational measures in accordance with legal requirements and the state of the art to ensure a level of protection appropriate to the risk.
| Data type | Purpose | Storage period |
|---|---|---|
| Email Address | Account creation, login, communication | Until account deletion |
| Username/display name | Identification in the system, leaderboards | Until account deletion |
| Password (hashed) | Authentication | Until account deletion |
| Learning progress | Storage of training progress | Until account deletion |
| Game data (points, coins) | Gamification system | Until account deletion |
| IP address | Security, abuse prevention | 7 days (server logs) |
| Friendship data | Social networking, friends list | Until removal of friendship or account deletion |
| Classroom membership | Teacher-student assignment | Until leaving the classroom or account deletion |
| Teacher assignment | Assignment of teacher-created accounts to the creating teacher | Until account deletion |
| Daily activity and streak | Gamification, progress tracking | Until account deletion |
| Tournament participation | Competition results | Until account deletion |
| Teacher request | Verification and account activation | 90 days after processing |
Users can create a user account. During registration, the required mandatory information is communicated to users and processed for the purpose of providing the user account based on contractual obligation.
The processed data includes: display name, email address, password (stored encrypted), avatar selection and learning progress.
Teachers can create student accounts without an email address (see Section 11). In this case, a username and random password are generated. Login is exclusively via username and password.
This website only uses technically necessary cookies. No analytics, tracking or advertising cookies are used.
These cookies are required for the operation of the website:
In addition to cookies, the website uses your browser's local storage (localStorage) to save your settings such as color mode, design theme, font and volume. This data remains exclusively in your browser and is not transmitted to our server.
Legal basis: Legitimate interests (Art. 6(1)(f) GDPR). The cookies and storage technologies used are required for the basic functions of the website or serve to store your chosen settings.
Our website is hosted on servers in the European Union. With each access, server log files are automatically created containing the following data:
This data is stored for security reasons for a maximum of 7 days and then automatically deleted.
For processing payments for Pro subscriptions, we use the payment service provider Mollie B.V.
Mollie B.V.
Keizersgracht 126
1015 CW Amsterdam, Netherlands
www.mollie.com
During payment transactions, the following data is transmitted to Mollie:
Data transmission is solely for the purpose of payment processing and is required for the performance of the contract (Art. 6(1)(b) GDPR).
Payment data is stored for the duration of the statutory retention periods (usually 7 years for tax-relevant documents).
Further information on data protection at Mollie can be found at:
https://www.mollie.com/de/privacy
Typr offers the option to log in using a Google or Microsoft account. This feature is optional and is only available for private accounts. School accounts created by teachers do not use a third-party login.
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
www.google.com
When registering via Google, the following data is transmitted to us by Google:
No passwords are transmitted to Typr. Authentication takes place exclusively via Google.
The processing is based on your consent (Art. 6 Para. 1 lit. a GDPR), which you give by selecting the Google login. You can revoke the link at any time in your account settings or on Google at myaccount.google.com/permissions .
Microsoft Ireland Operations Limited
One Microsoft Place, South County Business Park
Leopardstown, Dublin 18, Ireland
When logging in via Microsoft, the same categories of data are transmitted (email, name, Microsoft user ID). The link can be managed at account.microsoft.com/privacy .
Google privacy policy:
https://policies.google.com/privacy
Microsoft privacy policy:
https://privacy.microsoft.com/privacystatement
All JavaScript libraries, fonts and other resources are deployed locally from our own servers. No external content delivery networks (CDN) such as Cloudflare, jsDelivr or Google Fonts are integrated.
Likewise, fonts (Nunito, Fredoka One, JetBrains Mono) are hosted locally. No requests are sent to Google Fonts or other external font services. This means that no personal data (e.g. IP addresses) is transmitted to third parties.
In accordance with the transparency obligations of the EU Regulation on artificial intelligence (EU AI Act, Regulation (EU) 2024/1689), we inform about the use of the following AI-supported services:
The Google Cloud Translation API is used for the automatic translation of the user interface into 41 languages. Only predefined text elements of the user interface (menus, buttons, information texts) are translated.
Important: No personal data, no user input and no training content will be transmitted to Google. The translation is done once during development and is then saved locally. No requests are sent to Google during ongoing operation.
The learning platform itself does not use artificial intelligence for:
All exercise texts are editorial created. The performance measurement (strokes per minute, accuracy) is based on deterministic calculations without AI components.
Typr offers social features that allow users to connect with other users.
Users can send friend requests to other users and accept or decline them. The following data is processed as part of the friends list feature:
Users can challenge friends to typing duels. Game results (WPM/keystrokes per minute, accuracy) are shared with the duel partner. Participation in duels is voluntary.
When participating in tournaments, display name, avatar and game results are shown to all tournament participants.
Legal basis: Consent (Art. 6(1)(a) GDPR). The use of social features is voluntary. Friendships can be removed at any time, requests can be declined.
Typr offers a classroom feature that allows teachers to track their students' learning progress.
When student accounts are created by the teacher, the following data is processed:
No email address is collected for these accounts. Login is exclusively via username and password.
Students in the same classroom do not have access to other students' data. Only the teacher can view the performance data of all students in the classroom. There is no mutual visibility of student data within the classroom.
Teachers can export class data as a CSV file. The export contains only display names and performance data (WPM/keystrokes per minute, accuracy, level). No personal contact data (email addresses, dates of birth) is exported.
Legal basis: Consent (Art. 6(1)(a) GDPR). Joining a classroom is voluntary by entering the invitation code. For teacher-created accounts, the teacher is responsible for obtaining required consents. Students can leave the classroom at any time.
Registered users can receive optional email notifications on the following topics:
All email notifications are enabled by default and can be individually disabled at any time in the account settings.
Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) for service-related notifications. The user can object at any time.
Teachers can create a user account directly through the registration form on the “For Teachers” page. At the same time, a request to activate teacher status is submitted, which is manually reviewed.
During registration, a user account with “Student” status is created. A confirmation email is sent to verify the email address. The school and role information is used for manual review and activation of teacher status by the operator.
Account data is stored permanently as long as the user account exists. Request data (school, role, message) is stored until processing and deleted no later than 90 days after activation or rejection.
Legal basis: Performance of contract (Art. 6(1)(b) GDPR) for account creation; consent (Art. 6(1)(a) GDPR) for the teacher activation request.
Typr is designed for children aged 9 and above. We only collect the minimum necessary data and deliberately refrain from:
The platform-internal friends list feature is limited to mutual requests. No contact data (email) is shared between users. Only the display name and avatar are visible to other users.
For children under 16 years (under 14 in Austria), we recommend that registration is done together with a parent/guardian. Consent to data processing is considered given when registration is done with the consent of a parent/guardian.
As a data subject, you have various rights under the GDPR:
You have the right to request confirmation as to whether personal data concerning you is being processed.
You have the right to request the immediate rectification of inaccurate personal data concerning you.
You have the right to request the erasure of personal data concerning you ("right to be forgotten").
You have the right to request the restriction of processing.
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.
You have the right to object to the processing at any time for reasons arising from your particular situation.
You have the right to lodge a complaint with a supervisory authority. In Austria, this is the
Austrian Data Protection Authority:
Barichgasse 40-42, 1030 Wien
www.dsb.gv.at
The data we process is deleted as soon as it is no longer required for its processing purposes and there are no statutory retention obligations preventing deletion.
Alternatively, you can contact us by email and request the deletion of your account.
We reserve the right to update this privacy policy to ensure it always meets current legal requirements or to implement changes to our services.
The current version can always be found on this page. In case of significant changes, registered users will be informed by email.