This explains what Flash Fingers stores about you and why. Short version: as little as we can.
Without an account
Nothing is stored. Your rounds live only in your browser tab and are gone when you close it. We don't use analytics or advertising trackers.
With an account
- Email and display name — to sign you in and show you on the leaderboard. If you sign in with Google, we receive your Google name, email and profile picture URL. We never see your Google password.
- Password — stored hashed, never in plain text.
- Typing results — for each completed round: words per minute, accuracy, keystrokes, start and end time, and which passage you typed.
- Session cookie— keeps you signed in. It's the only cookie we set.
What's public
Your display name, average and best speed, and number of rounds appear on the public leaderboard once you've played five rounds. Your email is never shown.
Email
We only email you for account reasons: verifying your address, resetting your password, or confirming an email change. Delivery is handled by Resend. No newsletters.
Third parties
- Google — only if you choose to sign in with Google.
- Resend — sends the account emails above.
- Cloudflare — serves the site and sees standard connection data such as IP address.
- OpenAI — generates typing passages from public topics. Nothing about you or your typing is sent to it.
Deleting your data
Email [email protected]from your account address and we'll delete your account and all its results.
Changes
We may update this policy; the date at the top tells you when.