TechTypo

Privacy policy

Plain-English description of what TechTypo collects, why, where it is stored and for how long.

Last updated: 3 November 2026

Template notice. This policy was drafted to match how the product currently works. The owner should review it, confirm the provider list and retention periods, add the legal entity name and address, and have it checked against the laws that apply in the jurisdictions where it operates before relying on it.

Who we are

TechTypo (techtypo.com) is operated by [Owner legal name], [address]. Questions about this policy go to hello@techtypo.com.

The short version

  • We do not store passwords. Employers sign in with Google or with a one-time link sent to their email.
  • Candidates do not need an account. We store the name they type, their scores and timing summary statistics. We do not store the sequence of keystrokes or the text they typed.
  • We use session cookies to keep you signed in and to keep a test attempt attached to the right browser. We do not use advertising trackers or third-party analytics cookies.
  • Employer results are kept until the employer deletes them or deletes their account.
  • The site runs on Cloudflare. Emails are sent through Resend. Google handles Google sign-in.

What we collect from candidates

If you take a public test or a test from an employer's invite link, we store:

  • The name you enter, exactly as typed, so it can appear on a certificate or in the employer's dashboard.
  • Your results: test type, duration, gross and net WPM or KPH, accuracy, error count, characters typed, and the start and end time.
  • Timing summary statistics about your typing, such as the average and variation of time between keystrokes, used to produce integrity flags. We do not store the individual keystrokes, their order, or the text you typed.
  • Integrity events: whether a paste was attempted, how many times the browser tab lost focus during the test, and whether a touch device was used, together with the flags derived from these and from the timing statistics.
  • Technical details: a shortened browser identifier (user-agent string) and an IP address, used to detect abuse. IP addresses are not shown to employers.

If you take a test from an employer's invite link, the employer who created the link can see your name, results, timing summary statistics, integrity flags and device type. That employer is responsible for how they use your results in their hiring process.

If you generate a certificate, the record above is kept so the certificate can be verified at /verify/. Anyone who has the verification link can see the name, test type, duration, scores and date on that certificate. Do not share a verification link you do not want seen.

What we collect from employers

  • Your email address, from Google sign-in or from the address you entered for an emailed link. If you use Google sign-in we also receive your Google account's display name. We do not receive or store your Google password.
  • Tests you create: name, type, duration, settings and pass marks.
  • Invites you create: the candidate name and email you optionally enter for your own records, the access code if you set one, the expiry date and whether the invite was completed.
  • Candidate results for tests you run, as described above.
  • Sign-in activity: time and IP address of sign-ins, for security.

Cookies

We set a session cookie when an employer signs in, and a short-lived cookie during a test attempt so that the attempt stays attached to the same browser. Both are first-party and strictly functional. We do not set advertising cookies and we do not load third-party analytics or tracking scripts. Cloudflare may set its own cookies for security and performance; see Cloudflare's policy.

How we use the data

  • To run tests, compute scores, issue certificates and show results to the employer who created the test.
  • To verify certificates when someone opens a verification link.
  • To send one-time sign-in links and service emails (for example, notice of a change to pricing or this policy). We do not send marketing email without separate consent.
  • To detect abuse of the service.

We do not sell personal data and we do not share it with advertisers.

Who processes data on our behalf

  • Cloudflare: hosting, storage, networking and protection against abuse. Data is stored on Cloudflare's infrastructure.
  • Resend: sending sign-in links and service emails. Resend processes the recipient address and message content.
  • Google: if you choose Google sign-in, Google processes the sign-in and tells us your email address and display name.

Each provider acts under its own terms and privacy policy. We do not use other third-party services to process personal data.

How long we keep it

  • Employer test results are kept until the employer deletes the result, deletes the test, or deletes their account. Deleting a test deletes its results.
  • Public test results with a certificate are kept so the certificate remains verifiable. You can ask us to delete a certificate record by email; after deletion the verification link stops working.
  • Public test results without a certificate are not kept beyond the session.
  • Sign-in and security logs are kept for a limited period and then deleted. [Owner to confirm the period.]

Your rights

Depending on where you live, you may have the right to access, correct, export or delete personal data we hold about you, or to object to certain processing. To exercise any of these, email hello@techtypo.com. If you are a candidate whose results are held by an employer, we may need to refer your request to that employer, since they control how your results are used in hiring.

Employers can delete tests, results and their account from the dashboard at any time.

Children

The service is intended for people seeking or offering employment and is not directed at children under 16. We do not knowingly collect data from children.

Changes

If we change this policy in a way that matters, we will update the date at the top and notify employers by email. Continued use after a change means you accept the updated policy.

Contact

hello@techtypo.com. See also our terms of service.