← Back to home

Privacy Policy

As of: July 2026

Table of Contents

1. Controller

Emanuel Schmacher e.U.
Sielach 76
9133 Sittersdorf
Austria
UID-Nummer: ATU62078959
Email: support@typr.fun

Emanuel Schmacher e.U. is the controller within the meaning of the GDPR and is referred to in this statement as "the provider". Full contact details can be found in the Legal Notice.

2. Overview of Processing

The following overview summarizes the types of data processed and the purposes of their processing:

Types of data processed

Purposes of processing

3. Legal Basis

Below you will find an overview of the legal bases of the GDPR on the basis of which the provider processes personal data:

Legal basis Description
Consent (Art. 6 Para. 1 S. 1 lit. a GDPR) The data subject has given their consent.
Contract fulfillment (Art. 6 Para. 1 S. 1 lit. b GDPR) Necessary for the performance of a contract or pre-contractual measures.
Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) Processing is necessary for the purposes of legitimate interests.

4. Security Measures

The provider shall take appropriate technical and organisational measures in accordance with the legal requirements, taking into account the state of the art, in order to ensure a level of protection appropriate to the risk.

The security measures include:

5. Types of Data Processed in Detail

When using TYPR, the following data is processed:

Data type Purpose Storage period
Email Address Account creation, login, communication Until account deletion
Username/display name Identification in the system, leaderboards Until account deletion
Password (hashed) Authentication Until account deletion
Learning progress Storage of training progress Until account deletion
Game data (points, coins) Gamification system Until account deletion
IP address Security, abuse prevention 7 days (server logs)
Friendship data Social networking, friends list Until removal of friendship or account deletion
Classroom membership Teacher-student assignment Until leaving the classroom or account deletion
Teacher assignment Assignment of teacher-created accounts to the creating teacher Until account deletion
Daily activity and streak Gamification, progress tracking Until account deletion
Tournament participation Competition results Until account deletion
Teacher request Verification and account activation 90 days after processing
Time of last activity Account management, support, detection of inactive accounts Until account deletion
Browser time zone Account management and support (e.g. displaying times in your local time) Until account deletion
Activity log (pages viewed) Product improvement: Analysis at which point new users abandon the connection 90 days, then automatic deletion

Activity log for product improvement

In order to understand where new users have difficulties (for example: why is the training not started after registration?), the provider logs which pages are accessed within TYPR (page path and time) on the server side for self-registered accounts in the first 30 days after registration. In addition, the time of the last activity and the time zone transmitted by your browser are stored.

The legal basis is the legitimate interest of the provider in the improvement and further development of the service (Art. 6 para. 1 sentence 1 lit. f GDPR). You can object to this processing at any time with effect for the future (Art. 21 GDPR) by contacting the provider at support@typr.fun — the use of TYPR will not be affected.

6. Registration and Login

Users can create a user account. During registration, the required mandatory information is communicated to users and processed for the purpose of providing the user account based on contractual obligation.

Self-registration

Required information for registration:
  • Email Address
  • Password

The processed data includes: display name, email address, password (stored encrypted), avatar selection and learning progress.

Teacher-created accounts

Teachers can create student accounts without an email address (see Section 11). In this case, a username and random password are generated. Login is exclusively via username and password.

7. Cookies and Storage Technologies

This website only uses technically necessary cookies. No analytics, tracking or advertising cookies are used.

Necessary cookies

These cookies are required for the operation of the website:

Local storage (localStorage)

In addition to cookies, the website uses local browser storage (localStorage) to store your settings such as color mode, theme, font and volume. This data remains exclusively in your browser and is not transmitted to the provider's server.

Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f GDPR). The cookies and storage technologies used are necessary for the basic functions of the website or are used to store your selected settings.

8. Hosting and Server

The website is hosted on servers in the European Union. With each access, server log files are automatically created, which contain the following data:

This data is stored for security reasons for a maximum of 7 days and then automatically deleted.

9. Payment Service Provider

For the processing of payments for pro subscriptions, the provider uses the payment service provider Mollie B.V.

Provider

Mollie B.V.
Keizersgracht 126
1015 CW Amsterdam, Netherlands
www.mollie.com

Transmitted data

During payment transactions, the following data is transmitted to Mollie:

Purpose of processing

Data transmission is solely for the purpose of payment processing and is required for the performance of the contract (Art. 6(1)(b) GDPR).

Storage period

Payment data is stored for the duration of the statutory retention periods (usually 7 years for tax-relevant documents).

Further information

Further information on data protection at Mollie can be found at:
https://www.mollie.com/de/privacy

10. Registration via third-party providers (Google, Microsoft)

Typr offers the option to log in using a Google or Microsoft account. This feature is optional and is only available for private accounts. School accounts created by teachers do not use a third-party login.

Provider

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
www.google.com

Transmitted data

When logging in via Google, the following data is transmitted from Google to the provider:

No passwords are transmitted to Typr. Authentication takes place exclusively via Google.

Purpose and legal basis

The processing is based on your consent (Art. 6 Para. 1 lit. a GDPR), which you give by selecting the Google login. You can revoke the link at any time in your account settings or on Google at myaccount.google.com/permissions .

Microsoft (Azure AD / Microsoft 365)

Microsoft Ireland Operations Limited
One Microsoft Place, South County Business Park
Leopardstown, Dublin 18, Ireland

When logging in via Microsoft, the same categories of data are transmitted (email, name, Microsoft user ID). The link can be managed at account.microsoft.com/privacy .

Further information

Google privacy policy:
https://policies.google.com/privacy

Microsoft privacy policy:
https://privacy.microsoft.com/privacystatement

11. Local deployment of resources

All JavaScript libraries, fonts and other resources are provided locally by the provider's own servers. No external content delivery networks (CDN) such as Cloudflare, jsDelivr or Google Fonts are integrated.

Likewise, fonts (Nunito, Fredoka One, JetBrains Mono) are hosted locally. No requests are sent to Google Fonts or other external font services. This means that no personal data (e.g. IP addresses) is transmitted to third parties.

12. Use of AI-supported services (EU AI Act)

In accordance with the transparency obligations of the EU Artificial Intelligence Regulation (EU AI Act, Regulation (EU) 2024/1689), the provider informs about the use of the following AI-supported services:

Google Translate API (translation service)

The Google Cloud Translation API is used for the automatic translation of the user interface into 41 languages. Only predefined text elements of the user interface (menus, buttons, information texts) are translated.

Important: No personal data, no user input and no training content will be transmitted to Google. The translation is done once during development and is then saved locally. No requests are sent to Google during ongoing operation.

No use of AI in learning operations

The learning platform itself does not use artificial intelligence for:

All exercise texts are editorial created. The performance measurement (strokes per minute, accuracy) is based on deterministic calculations without AI components.

13. Social functions and friend list

Typr offers social features that allow users to connect with other users.

Friends list

Users can send friend requests to other users and accept or decline them. The following data is processed as part of the friends list feature:

Duels and challenges

Users can challenge friends to typing duels. Game results (WPM/keystrokes per minute, accuracy) are shared with the duel partner. Participation in duels is voluntary.

Tournaments

When participating in tournaments, display name, avatar and game results are shown to all tournament participants.

Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a GDPR). The use of social functions is voluntary. Friendships can be removed at any time and requests can be rejected.

14. Classroom function for teachers

Typr offers a classroom feature that allows teachers to track their students' learning progress.

Processed data

Teacher-created student accounts

When student accounts are created by the teacher, the following data is processed:

No email address is collected for these accounts. Login is exclusively via username and password.

Data separation between students

Students in the same classroom do not have access to other students' data. Only the teacher can view the performance data of all students in the classroom. There is no mutual visibility of student data within the classroom.

Data export

Teachers can export class data as a CSV file. The export contains only display names and performance data (WPM/keystrokes per minute, accuracy, level). No personal contact data (email addresses, dates of birth) is exported.

Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a GDPR). Joining a classroom is voluntary by entering the invitation code. For accounts created by the teacher, the teacher is responsible for obtaining any necessary consents. Students can leave the classroom at any time.

Note for schools: If Typr is used in a school context, students or their legal guardians should be informed about its use. The teacher is responsible for complying with the data protection requirements of their educational institution. An order processing agreement (AVV) in accordance with Art. 28 GDPR is available at typr.fun/avv .

15. Email notifications

Registered users can receive optional email notifications on the following topics:

All email notifications are enabled by default and can be individually disabled at any time in the account settings.

Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f GDPR) for service-related notifications. The user can object at any time.

16. Teacher registration and inquiries

Teachers can create a user account directly through the registration form on the “For Teachers” page. At the same time, a request to activate teacher status is submitted, which is manually reviewed.

Processed data

Purpose of processing

During registration, a user account with “Student” status is created. A confirmation email is sent to verify the email address. The school and role information is used for manual review and activation of teacher status by the operator.

Storage period

Account data is stored permanently as long as the user account exists. Request data (school, role, message) is stored until processing and deleted no later than 90 days after activation or rejection.

Legal basis: Fulfillment of the contract (Art. 6 para. 1 sentence 1 lit. b GDPR) for account creation; Consent (Art. 6 Para. 1 S. 1 lit. a GDPR) for the request for teacher activation.

17. Special information for children and young people

Child protection is a top priority!

Typr is designed for children from the age of 9. Only the minimum necessary data is collected; the following is deliberately omitted:

The platform-internal friends list feature is limited to mutual requests. No contact data (email) is shared between users. Only the display name and avatar are visible to other users.

Consent by parents/guardians

For children under the age of 16 (in Austria under the age of 14), it is recommended to register together with a legal guardian. Consent to data processing is deemed to have been given if the registration is made with the consent of a legal guardian.

18. Rights of data subjects

As a data subject, you have various rights under the GDPR:

Right of access (Art. 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed.

Right to rectification (Art. 16 GDPR)

You have the right to request the immediate rectification of inaccurate personal data concerning you.

Right to erasure (Art. 17 GDPR)

You have the right to request the erasure of personal data concerning you ("right to be forgotten").

Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing.

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

Right to object (Art. 21 GDPR)

You have the right to object to the processing at any time for reasons arising from your particular situation.

Right to complain

You have the right to lodge a complaint with a supervisory authority. In Austria, this is the Austrian Data Protection Authority:
Barichgasse 40-42, 1030 Wien
www.dsb.gv.at

19. Deletion of data

The data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no legal obligations to preserve records to prevent its deletion.

How to delete your data:

  1. Log in to your account
  2. Go to "Settings"
  3. Click on "Delete account"
  4. Confirm the deletion

Alternatively, you can contact the provider by email and request the deletion of your account.

20. Changes to this data protection declaration

The provider reserves the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to the services.

The current version can always be found on this page. In case of significant changes, registered users will be informed by email.