Privacy Policy

1. What we collect

When you create an account we collect your username and email address. During races we record your WPM, accuracy, and race timestamps. We do not collect real names, phone numbers, or payment information.

2. How we use your data

• To display your stats, leaderboard position, and profile.
• To send password-reset emails when you request them.
• To detect and prevent cheating (timing analysis on race results).
• To improve the platform based on aggregate usage patterns.

3. Cookies & sessions

We store a HttpOnly, Secure, SameSite=None cookie named gtc-token to keep you signed in for up to 7 days. No third-party tracking cookies are used.

4. Data sharing

We do not sell or share your personal data with third parties. Race results and leaderboard positions are public by design. This is a competitive platform.

5. Data storage

Your data is stored in a PostgreSQL database hosted on Supabase with Row Level Security enabled. Passwords are hashed with bcrypt and never stored in plain text.

6. Your rights

You may request deletion of your account and all associated data at any time by emailing us at the address on the Contact page. We will process the request within 14 days.

7. Changes

We may update this policy as the platform grows. Significant changes will be announced on the platform. Continued use after changes constitutes acceptance.