← Back to home

Privacy Policy

Last updated: March 2026

Table of Contents

1. Controller

Emanuel Schmacher
Email: support@typr.fun

Full contact details can be found in our Legal Notice.

2. Overview of Processing

The following overview summarizes the types of data processed and the purposes of their processing:

Types of data processed

Purposes of processing

3. Legal Basis

Below you will find an overview of the GDPR legal bases on which we process personal data:

Legal basis Description
Consent (Art. 6(1)(a) GDPR) The data subject has given their consent.
Performance of contract (Art. 6(1)(b) GDPR) Necessary for the performance of a contract or pre-contractual measures.
Legitimate interests (Art. 6(1)(f) GDPR) Processing is necessary for the purposes of legitimate interests.

4. Security Measures

We take appropriate technical and organizational measures in accordance with legal requirements and the state of the art to ensure a level of protection appropriate to the risk.

Our security measures include:

5. Types of Data Processed in Detail

When using Typr, we process:

Data type Purpose Storage period
Email Address Account creation, login, communication Until account deletion
Username/display name Identification in the system, leaderboards Until account deletion
Password (hashed) Authentication Until account deletion
Learning progress Storage of training progress Until account deletion
Game data (points, coins) Gamification system Until account deletion
IP address Security, abuse prevention 7 days (server logs)
Friendship data Social networking, friends list Until removal of friendship or account deletion
Classroom membership Teacher-student assignment Until leaving the classroom or account deletion
Teacher assignment Assignment of teacher-created accounts to the creating teacher Until account deletion
Daily activity and streak Gamification, progress tracking Until account deletion
Tournament participation Competition results Until account deletion
Teacher request Verification and account activation 90 days after processing

6. Registration and Login

Users can create a user account. During registration, the required mandatory information is communicated to users and processed for the purpose of providing the user account based on contractual obligation.

Self-registration

Required information for registration:
  • Email Address
  • Password

The processed data includes: display name, email address, password (stored encrypted), avatar selection and learning progress.

Teacher-created accounts

Teachers can create student accounts without an email address (see Section 11). In this case, a username and random password are generated. Login is exclusively via username and password.

7. Cookies and Storage Technologies

This website only uses technically necessary cookies. No analytics, tracking or advertising cookies are used.

Necessary cookies

These cookies are required for the operation of the website:

Local storage (localStorage)

In addition to cookies, the website uses your browser's local storage (localStorage) to save your settings such as color mode, design theme, font and volume. This data remains exclusively in your browser and is not transmitted to our server.

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR). The cookies and storage technologies used are required for the basic functions of the website or serve to store your chosen settings.

8. Hosting and Server

Our website is hosted on servers in the European Union. With each access, server log files are automatically created containing the following data:

This data is stored for security reasons for a maximum of 7 days and then automatically deleted.

9. Payment Service Provider

For processing payments for Pro subscriptions, we use the payment service provider Mollie B.V.

Provider

Mollie B.V.
Keizersgracht 126
1015 CW Amsterdam, Netherlands
www.mollie.com

Transmitted data

During payment transactions, the following data is transmitted to Mollie:

Purpose of processing

Data transmission is solely for the purpose of payment processing and is required for the performance of the contract (Art. 6(1)(b) GDPR).

Storage period

Payment data is stored for the duration of the statutory retention periods (usually 7 years for tax-relevant documents).

Further information

Further information on data protection at Mollie can be found at:
https://www.mollie.com/de/privacy

10. Anmeldung über Drittanbieter (Google, Microsoft)

Typr bietet die Möglichkeit, sich über einen Google- oder Microsoft-Account anzumelden. Diese Funktion ist optional und steht ausschließlich für private Konten zur Verfügung. Schulkonten, die von Lehrkräften erstellt werden, nutzen keine Drittanbieter-Anmeldung.

Provider

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Irland
www.google.com

Transmitted data

Bei der Anmeldung über Google werden folgende Daten von Google an uns übermittelt:

Es werden keine Passwörter an Typr übermittelt. Die Authentifizierung erfolgt ausschließlich über Google.

Zweck und Rechtsgrundlage

Die Verarbeitung erfolgt auf Grundlage Ihrer Einwilligung (Art. 6 Abs. 1 lit. a DSGVO), die Sie durch die Auswahl der Google-Anmeldung erteilen. Sie können die Verknüpfung jederzeit in Ihren Kontoeinstellungen oder bei Google unter myaccount.google.com/permissions widerrufen.

Microsoft (Azure AD / Microsoft 365)

Microsoft Ireland Operations Limited
One Microsoft Place, South County Business Park
Leopardstown, Dublin 18, Irland

Bei der Anmeldung über Microsoft werden die gleichen Datenkategorien übermittelt (E-Mail, Name, Microsoft-Nutzer-ID). Die Verknüpfung kann unter account.microsoft.com/privacy verwaltet werden.

Further information

Datenschutzerklärung von Google:
https://policies.google.com/privacy

Datenschutzerklärung von Microsoft:
https://privacy.microsoft.com/privacystatement

11. Lokale Bereitstellung von Ressourcen

Alle JavaScript-Bibliotheken, Schriftarten und sonstige Ressourcen werden lokal von unseren eigenen Servern bereitgestellt. Es werden keine externen Content Delivery Networks (CDN) wie Cloudflare, jsDelivr oder Google Fonts eingebunden.

Ebenso werden Schriftarten (Nunito, Fredoka One, JetBrains Mono) lokal gehostet. Es werden keine Anfragen an Google Fonts oder andere externe Schriftarten-Dienste gesendet. Dadurch werden keine personenbezogenen Daten (z.B. IP-Adressen) an Drittanbieter übermittelt.

12. Einsatz von KI-gestützten Diensten (EU AI Act)

Im Sinne der Transparenzpflichten der EU-Verordnung über künstliche Intelligenz (EU AI Act, Verordnung (EU) 2024/1689) informieren wir über den Einsatz folgender KI-gestützter Dienste:

Google Translate API (Übersetzungsdienst)

Für die automatische Übersetzung der Benutzeroberfläche in 41 Sprachen wird die Google Cloud Translation API eingesetzt. Dabei werden ausschließlich vordefinierte Textelemente der Benutzeroberfläche (Menüs, Buttons, Hinweistexte) übersetzt.

Important: Es werden keine personenbezogenen Daten, keine Nutzereingaben und keine Trainingsinhalte an Google übermittelt. Die Übersetzung erfolgt einmalig bei der Entwicklung und wird anschließend lokal gespeichert. Im laufenden Betrieb werden keine Anfragen an Google gesendet.

Kein Einsatz von KI im Lernbetrieb

Die Lernplattform selbst verwendet keine künstliche Intelligenz für:

Alle Übungstexte sind redaktionell erstellt. Die Leistungsmessung (Anschläge pro Minute, Genauigkeit) basiert auf deterministischen Berechnungen ohne KI-Komponenten.

13. Soziale Funktionen und Freundesliste

Typr offers social features that allow users to connect with other users.

Friends list

Users can send friend requests to other users and accept or decline them. The following data is processed as part of the friends list feature:

Duels and challenges

Users can challenge friends to typing duels. Game results (WPM/keystrokes per minute, accuracy) are shared with the duel partner. Participation in duels is voluntary.

Tournaments

When participating in tournaments, display name, avatar and game results are shown to all tournament participants.

Legal basis: Consent (Art. 6(1)(a) GDPR). The use of social features is voluntary. Friendships can be removed at any time, requests can be declined.

14. Klassenraum-Funktion für Lehrkräfte

Typr offers a classroom feature that allows teachers to track their students' learning progress.

Processed data

Teacher-created student accounts

When student accounts are created by the teacher, the following data is processed:

No email address is collected for these accounts. Login is exclusively via username and password.

Data separation between students

Students in the same classroom do not have access to other students' data. Only the teacher can view the performance data of all students in the classroom. There is no mutual visibility of student data within the classroom.

Data export

Teachers can export class data as a CSV file. The export contains only display names and performance data (WPM/keystrokes per minute, accuracy, level). No personal contact data (email addresses, dates of birth) is exported.

Legal basis: Consent (Art. 6(1)(a) GDPR). Joining a classroom is voluntary by entering the invitation code. For teacher-created accounts, the teacher is responsible for obtaining required consents. Students can leave the classroom at any time.

Note for schools: Wenn Typr im schulischen Kontext eingesetzt wird, sollten die Schüler bzw. deren Erziehungsberechtigte über die Nutzung informiert werden. Die Lehrkraft ist dafür verantwortlich, die datenschutzrechtlichen Anforderungen ihrer Bildungseinrichtung einzuhalten. Ein Auftragsverarbeitungsvertrag (AVV) gemäß Art. 28 DSGVO steht unter typr.fun/avv bereit.

15. E-Mail-Benachrichtigungen

Registered users can receive optional email notifications on the following topics:

All email notifications are enabled by default and can be individually disabled at any time in the account settings.

Legal basis: Legitimate interests (Art. 6(1)(f) GDPR) for service-related notifications. The user can object at any time.

16. Lehrkraft-Registrierung und -Anfragen

Teachers can create a user account directly through the registration form on the “For Teachers” page. At the same time, a request to activate teacher status is submitted, which is manually reviewed.

Processed data

Purpose of processing

During registration, a user account with “Student” status is created. A confirmation email is sent to verify the email address. The school and role information is used for manual review and activation of teacher status by the operator.

Storage period

Account data is stored permanently as long as the user account exists. Request data (school, role, message) is stored until processing and deleted no later than 90 days after activation or rejection.

Legal basis: Performance of contract (Art. 6(1)(b) GDPR) for account creation; consent (Art. 6(1)(a) GDPR) for the teacher activation request.

17. Besondere Hinweise für Kinder und Jugendliche

Child protection is our highest priority!

Typr is designed for children aged 9 and above. We only collect the minimum necessary data and deliberately refrain from:

The platform-internal friends list feature is limited to mutual requests. No contact data (email) is shared between users. Only the display name and avatar are visible to other users.

Consent by parents/guardians

For children under 16 years (under 14 in Austria), we recommend that registration is done together with a parent/guardian. Consent to data processing is considered given when registration is done with the consent of a parent/guardian.

18. Rechte der betroffenen Personen

As a data subject, you have various rights under the GDPR:

Right of access (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed.

Right to rectification (Art. 16 GDPR)

You have the right to request the immediate rectification of inaccurate personal data concerning you.

Right to erasure (Art. 17 GDPR)

You have the right to request the erasure of personal data concerning you ("right to be forgotten").

Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing.

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

Right to object (Art. 21 GDPR)

You have the right to object to the processing at any time for reasons arising from your particular situation.

Right to complain

You have the right to lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority:
Barichgasse 40-42, 1030 Wien
www.dsb.gv.at

19. Löschung von Daten

The data we process is deleted as soon as it is no longer required for its processing purposes and there are no statutory retention obligations preventing deletion.

How to delete your data:

  1. Log in to your account
  2. Go to "Settings"
  3. Click on "Delete account"
  4. Confirm the deletion

Alternatively, you can contact us by email and request the deletion of your account.

20. Änderungen dieser Datenschutzerklärung

We reserve the right to update this privacy policy to ensure it always meets current legal requirements or to implement changes to our services.

The current version can always be found on this page. In case of significant changes, registered users will be informed by email.