Privacy Policy

1. What We Collect

CatType collects the following data depending on how you use the app:

• Without an account: No personal data is collected. Your settings are stored locally in your browser (localStorage).
• With an account: Name, email address, and profile image from your OAuth provider (Google, GitHub, or Discord). A username you choose.
• Typing test results: WPM, accuracy, consistency, test mode, language, and duration (stored in our database when signed in).
• Progression data: XP, level, streaks, and daily challenge completions.
• Gamification data: Achievements, cat collection, CatCoin balance and transaction history, equipped cosmetics.
• Multiplayer data: Race results, matchmaking ratings, league standings.
• Payment data: Purchase history and subscription status (payment details are handled by Stripe and never stored on our servers).
• Team data: Team memberships and referral relationships.
• Social data: Follow relationships between users.

2. How We Use Your Data

• Service delivery: Displaying your profile, leaderboard ranking, streak progress, and test history.
• Error monitoring: We use Sentry to detect and fix bugs. Sentry may collect error stack traces and device metadata. Text content in error replays is masked.
• Analytics (with consent): We use PostHog to understand how people use CatType and improve the experience. Analytics only activates after you explicitly opt in via the consent banner.

3. Third-Party Services

• Cloudflare — Hosting and CDN. Processes requests and may log IP addresses for security.
• Turso — Database hosting (stores user accounts, test results, progression data).
• Upstash — Redis caching (leaderboard scores, rate limiting).
• Sentry — Error tracking (essential, no consent required).
• PostHog — Product analytics (only with your consent).
• Stripe — Payment processing (handles checkout for premium subscriptions and CatCoin purchases).
• PartyKit — Real-time multiplayer race infrastructure (processes race room data).
• OAuth providers — Google, GitHub, Discord (for sign-in only).

4. Cookies & Local Storage

CatType uses the following browser storage:

• cattype-settings (localStorage) — Your preferences (theme, language, test mode). Essential.
• cattype-consent (localStorage) — Your consent choices. Essential.
• Auth session cookie — Keeps you signed in. Essential.
• PostHog cookies — Analytics tracking identifiers. Only set after you opt in to analytics.

5. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Delete your account and all associated data via your Settings page.
• Withdraw consent for analytics at any time via your Settings page.
• Data portability — Export your data via your Settings page.

To exercise these rights, contact us at privacy@cattype.io.

6. Data Retention

Test results and progression data are retained as long as your account exists. When you delete your account, all associated data is permanently removed from our database.

7. Lawful Basis

• Contract: Processing necessary to provide the CatType service (test results, leaderboards, profiles).
• Legitimate interest: Error monitoring via Sentry to maintain service reliability.
• Consent: Analytics via PostHog (opt-in only).

8. Contact

For privacy-related questions, email privacy@cattype.io.