Privacy Policy

TypingSarthi.com (“TypingSarthi”, “we”, “us”) is a typing practice website for government and competitive exam preparation, operated by Mazhar in India. This policy explains what personal data we collect when you use the website, why we collect it, and the choices you have. By using TypingSarthi.com you agree to this policy.

1. What we collect

• Account details: your name and email address, and a password stored only in hashed (bcrypt) form — we never see or store your actual password. If you sign in with Google, we receive your name, email address and profile picture from Google. Guest accounts are created without any name or email.
• Mobile number: only if you choose to add one for verification.
• Practice data: typing speed (WPM), accuracy, mistakes per key and letter pair, session duration, level progress, streaks, badges, certificates and race results.
• Content you create: custom practice text you save, and reviews you submit (including the display name and role you enter).
• Settings: your theme, interface preferences and leaderboard choices, including the alias you choose.
• Security records: the email address and time of sign-in attempts (to stop password-guessing), short-lived verification and password-reset codes, and — for review submissions only — a one-way hash of your IP address, not the address itself, to prevent spam.

We do not collect payment information, and we do not sell your personal data.

2. How we use it

• To create and secure your account, and to verify your email address.
• To run the practice features: tracking progress, generating adaptive practice from your weak keys, awarding badges and certificates, and showing your history.
• To show the leaderboard and races — only if you opt in, and only under your alias.
• To display approved reviews publicly and to moderate submissions.
• To send service emails such as verification codes and password-reset links.
• To prevent abuse, fix problems and improve the website.

3. What is visible to others

Your practice data is private to your account. If you opt in to leaderboards or join a race, your chosen alias and scores are shown to other users — never your email address. Approved reviews are shown publicly with the name and role you entered.

4. Service providers we use

We share data only with providers that help us run the website, and only as needed for that purpose:

• Vercel — website hosting.
• Supabase — database hosting.
• Twilio SendGrid — sending service emails.
• Google — only if you choose “Continue with Google” to sign in.
• Ahrefs Web Analytics — counts visits so we can see which pages are actually useful. It sets no cookies and stores no personal or identifiable information. It records the page visited, the site you arrived from, your approximate country and city, and your device, browser and language. Your IP address is not stored: it is hashed each day and used only so that one visitor is counted once.

We do not show third-party advertising. Beyond the visit counting described above, we do not use analytics that build a profile of you or follow you across other websites. We may also disclose data where required by law.

5. Where your data is stored

Our providers operate servers outside India, including in Singapore and the United States. By using the website you consent to your data being processed there, with the safeguards described in this policy.

6. Cookies

We use only essential cookies:

• a sign-in session cookie that keeps you logged in, and a security (CSRF) cookie;
• a theme cookie that remembers your colour theme so pages load in the right theme.

We do not use advertising or tracking cookies.

7. How long we keep data

We keep your account and practice history for as long as your account exists. Sign-in attempt records and verification codes are kept only briefly for security. Guest accounts that have not been used for 12 months may be deleted. When you ask us to delete your account, we delete it together with your practice history, saved texts, badges, certificates and race entries; any reviews you wrote stay published but are no longer linked to your account.

8. Your rights

Under India's Digital Personal Data Protection Act, 2023 and other applicable law, you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct or update inaccurate data;
• delete your account and personal data;
• withdraw consent (which may mean we can no longer provide the service to you).

Email mazharhussan106@gmail.com from the address linked to your account. We aim to respond within 30 days. You can also change your preferences and leaderboard choices yourself on your profile and settings pages.

9. Security

We use HTTPS, hashed passwords, rate limits on sign-in and reviews, and securely generated tokens. No online service can be perfectly secure, so please use a strong password that you do not use elsewhere.

10. Children

TypingSarthi.com is intended for users aged 18 and over. If you are under 18, please use it only with the consent and supervision of a parent or guardian. If you believe a child has given us personal data without that consent, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date above shows when it last changed; for significant changes we will also show a notice on the website.

12. Contact and grievances

For any question, request or complaint about your data, contact Mazhar at mazharhussan106@gmail.com. See also our Terms of Service.