Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your email address and a username of your choice. We do not require your real name or any other personally identifiable information to use the Service.

Practice Activity Data

We store information about your typing practice sessions, including performance metrics (words per minute, accuracy), practice settings, and completion timestamps. This data is associated with your account to provide analytics and track your progress.

Technical Information

We may collect basic technical information such as your country and city (derived from your IP address at signup), browser type, and device information for analytics and service improvement purposes.

2. What We Do NOT Collect

Your typing experience stays on your machine. We do not see, record, or store any keystrokes or typing activity outside of completed practice sessions on our site. We have no access to what you type elsewhere on your device. We do not use fingerprinting techniques, hidden pixels, or any other covert tracking methods.

3. How We Use Your Information

• Provide and improve the typing practice service
• Display your progress, statistics, and achievements
• Populate leaderboards and rankings
• Send important service-related communications
• Analyze aggregated, anonymized data for performance and growth measurements

4. Analytics

We use privacy-respecting analytics to understand how users interact with the Service. This data is collected in an anonymized or aggregated form and is used solely for performance monitoring, error tracking, and improving the user experience. We do not attempt to identify individual users through analytics data, and we do not share this data with third parties for advertising or profiling purposes.

5. Cookies

We use cookies in two categories: (a) Essential cookies — always active and required for the Service to function. These maintain your session and remember your preferences such as theme and language settings. (b) Analytics cookies — we use a privacy-respecting analytics tool (PostHog) that is activated only after you provide explicit consent, where required by your applicable data protection region. You may manage your cookie preferences at any time through the privacy settings panel. We do not use advertising cookies, tracking cookies, or any third-party cookies that monitor your behavior across websites. There are no hidden scripts or third-party trackers embedded in Keystreaks.

6. No Advertising

Keystreaks does not display advertisements of any kind. We do not partner with advertising networks, we do not serve ads, and we do not allow third-party ad scripts on our platform. Your experience on Keystreaks is completely ad-free for all users.

7. Payment Information

All payment processing for Premium accounts is handled securely by Stripe, a trusted third-party payment processor. We do not have access to your full credit card number, CVV, or other sensitive payment details. Stripe processes and stores this information according to PCI-DSS standards. We only receive confirmation of successful payments and basic transaction information necessary to activate your Premium features.

8. Data Storage and Security

Your data is stored on high-security cloud infrastructure provided by industry-leading services. We do not store data locally on the developer's personal servers or machines. All data transmission is encrypted using HTTPS, and we implement appropriate technical and organizational measures to protect your information.

9. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We do not share your data with advertisers, data brokers, or marketing companies. We may share anonymized, aggregated statistics publicly (such as total practice sessions completed globally). We may disclose information only if required by law or to protect our legal rights.

10. Your Rights

You have the right to access, correct, or delete your personal data at any time. You can manage your account settings and preferences through your account dashboard. You may delete your account and all associated data through the Preferences page, or by contacting us at support@keystreaks.com. For detailed rights under GDPR (EU/EEA users) or CCPA (California residents), see Section 17. Education Plan users may exercise their rights directly or through their Organization's Org Admin. Organizations may request access to or deletion of all data associated with their members by contacting support@keystreaks.com.

11. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data will be removed, though anonymized practice statistics may be retained for aggregate analytics purposes.

12. Children's Privacy

The public, consumer version of the Service is not directed at children under the age of 13, and we do not knowingly collect personal information from children under 13 through the public sign-up flow. If you believe a child under 13 has created a public account, please contact us immediately at support@keystreaks.com and we will take steps to delete the account and associated data. The Keystreaks Education Plan may serve users under the age of 13 when enrolled by a school or other educational institution. In this context: (a) the enrolling institution acts as the data controller and is solely responsible for obtaining all parental, guardian, or legal consents required by applicable law, including but not limited to the Children's Online Privacy Protection Act (COPPA) in the United States, GDPR provisions for children in the European Union, and equivalent local laws; (b) Keystreaks, as data processor, does not collect personally identifiable information from enrolled students — accounts are created with platform-generated or institution-assigned identifiers only (see Section 16); (c) Keystreaks does not independently verify the ages of students enrolled by institutions and relies on the institution's confirmation that it has complied with all applicable legal requirements.

13. International Users

The Service is operated from Mexico. By using the Service, you consent to the transfer and processing of your data in accordance with this Privacy Policy and the laws of Mexico.

14. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of this page will indicate when changes have been made. We will notify users of significant changes through the Service. Your continued use after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, your data, or wish to exercise your privacy rights, please contact us at: support@keystreaks.com

16. Education Plan Data Practices

Keystreaks applies a strict no-PII (no Personally Identifiable Information) model for Education Plan users. The following practices govern how we handle student and educator data: (a) SSO-enrolled students: When a student joins via Google Single Sign-On, the platform captures only Google's unique account identifier (a sub claim). No name, email address, profile picture, or other personal data is retrieved from Google. A synthetic internal email address is generated solely for account management purposes and is never shared or exposed to any third party. (b) Non-SSO students and educators: Accounts are created using a platform-generated username and an institution-assigned school identifier (matrícula). No real name, real email address, or date of birth is collected by Keystreaks. (c) School identifier (matrícula): This is a non-PII reference code assigned by the school. It cannot independently identify the student outside the school's own records. (d) Data controller / data processor: For Education Plan users, the enrolling institution acts as the data controller. Keystreaks acts as a data processor on the institution's behalf, processing student data only as necessary to deliver the Service. Institutions are responsible for their own data protection obligations under applicable law. (e) Educator access: Educators may voluntarily follow individual students within the platform. Followed students' typing progress and performance metrics are visible to the educator within the platform only. (f) Org Admin access: Org Admins can view activity data and performance metrics for all members of their Organization within the admin dashboard. (g) Data isolation: Education Plan member data is scoped to the member's Organization and is not accessible to other organizations, public users, or visible on public leaderboards.

17. GDPR and CCPA Compliance

17.1. European Union / EEA Users (GDPR)

If you are located in the European Union or the European Economic Area, the General Data Protection Regulation (GDPR) applies to the processing of your personal data. Our legal bases for processing are: contract performance (account creation and service delivery), legitimate interests (service improvement and fraud prevention), and consent (non-essential analytics cookies). You have the right to: access your personal data; request correction of inaccurate data; request erasure ("right to be forgotten"); restrict or object to processing; and request data portability. To exercise any of these rights, contact us at support@keystreaks.com. For Education Plan users, rights may also be exercised through your Organization's Org Admin.

17.2. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the right to: know what personal information we collect and how it is used; request deletion of your personal information; and opt out of the sale of personal information. Keystreaks does not sell personal information to third parties. To submit a request or to opt out, contact us at support@keystreaks.com or visit our Manifesto page accessible from the footer.

17.3. Cookie Consent

We determine your applicable data protection region based on your location at the time of your first visit. Users in the EU/EEA are presented with an explicit consent prompt before any non-essential cookies or analytics scripts are activated. California users are presented with an opt-out option. Users in all other regions are given a notice with the option to manage their preferences. You may update your cookie preferences at any time through the privacy settings panel. Opting out of analytics cookies will prevent analytics tools from loading. Essential session and preference cookies are not subject to consent withdrawal as they are required for the Service to function.