Privacy Policy

1. Scope and operator

KeyTute is an English typing learning and practice website operated by keytute in India. This policy describes account information, typing activity, contact requests and browser storage. Use our Contact Us form for privacy questions or requests.

2. Information you provide

An account may contain a username, email address and profile details supplied to the operator. Django authentication stores password verification information using password hashing, not a plain-text password field. Do not send your password in a support request.

Use the Contact Us form for support, privacy or content requests. We store the information you submit in the private administrator inbox to handle your request. No automatic email receipt or marketing signup is provided by this form.

3. Typing activity and saved progress

Signed-in Learn attempts can include speed, accuracy, errors, character counts, duration and lesson completion. Daily Practice stores completed runs and calendar progress. General Typing Tests retain completed results and mistake summaries such as weak keys and mistyped words. Signed-in Quick, Content, Custom and Skill Practice also save timing, performance and mistake summaries to the account; custom source text and complete typed text are not included in those summaries. These records support progress views, recommendations, streaks and learning continuity.

Exam attempts additionally retain the selected source passage, typed response, edit events, accepted rule snapshot, timing, result and optional tab/window integrity counts. An attempt can be linked to an account or a guest session. Those records are not an official examination record.

4. Custom Practice text

When you submit Custom Practice, the text is sent to the KeyTute server in a form POST and returned as part of the typing-window configuration. The inspected Custom Practice view does not write that source text to the application database. This is temporary request processing, not a guarantee that information can never appear in browser copies, infrastructure logs, monitoring or backups configured by a deployment.

Recent browser performance history stores metrics, timestamps and mistaken key summaries rather than the complete custom source text. Mistaken keys can still reveal individual characters. Optional browser history is controlled by Cookie Preferences. Avoid entering passwords, sensitive personal data, confidential correspondence or material you are not entitled to provide.

5. Browser and network information

Your browser sends connection and device information needed to deliver the website. Hosting services may process IP addresses, request paths, timestamps, status codes and user-agent information for operation and security. Production hosting locations and service-provider details will be published before launch.

The website uses system fonts and does not request Google Fonts. Optional analytics and advertising have separate consent controls.

6. Cookies and browser storage

Session and request-security cookies support login, guest attempt ownership and CSRF protection. A preference cookie records your optional browser-history choice. When enabled, local storage can retain up to 30 recent non-exam performance summaries per browser scope. Exam session storage can retain typed text and edit events to recover the active attempt. Read the Cookie Policy for actual storage names and controls.

7. How information is used

We use account and activity information to provide requested features, calculate typing results, maintain progress, suggest practice and handle support requests. Operational information helps protect accounts, limit abuse and investigate faults.

Optional analytics and advertising are subject to their consent controls. Requests relating to your information can be submitted through Contact Us. Applicable rights and processing grounds depend on your location and the service involved.

8. Analytics and advertising

Google Analytics 4 is configured for public overview pages on the live HTTPS keytute.com website. It loads only after Analytics consent. Login, private dashboards, contact forms, typing sessions and game windows are excluded. Local development does not load Google Analytics.

Google can receive browser, device and network information and use first-party _ga cookies to measure visits. Analytics cookies are configured for up to 180 days. The website sends public page paths and fixed page titles without query strings, referrers, account identifiers, contact messages or typed text. Advertising personalization and Google signals are disabled by the website configuration. Provider processing may involve international transfers; see https://policies.google.com/privacy.

Change or withdraw Analytics consent using Cookie Preferences in the footer. Withdrawal stops tracking on the next page load and removes matching first-party analytics cookies; it does not erase data already received by Google. Advertising has a separate permission and remains subject to its own deployment requirements.

9. Subscriptions and payment information

The current platform is free and Premium is a preview. There is no checkout, payment processor or stored card-collection flow. Illustrative prices, if configured, are not chargeable offers.

Before paid services launch, the operator must identify the processor, transaction/account information received, relevant terms and retention requirements. Do not submit payment credentials through legal or support correspondence.

10. Sharing and external services

Authorized hosting and infrastructure services may process information to operate the website. Google Analytics and Google advertising services may process information only when the relevant integration is configured and permitted. We may disclose information where required by applicable law or necessary to investigate misuse.

External links lead to services with their own privacy practices. Actual hosting providers, processing locations and transfer arrangements will be disclosed before public launch.

11. Retention and deletion

Account information, saved attempts and progress remain until removed through an authorized process; there is no automatic account-deletion or inactivity purge. Contact messages and administrator notes remain until the administrator deletes them. A Resolved or Spam status does not delete a message.

You can request access, correction or deletion through Contact Us. We may need to verify account ownership and consider applicable obligations before acting. Optional browser history contains up to 30 summaries per scope. Browser controls and Cookie Preferences manage browser data separately from server records. Production log retention and backup expiry will be published before launch.

12. Access, correction and other rights

Depending on your location and the applicable conditions, you may be able to request access, correction, deletion, a portable copy, restriction, objection or withdrawal of consent. Regional complaint and opt-out rights can differ. This website does not present every regional right as universally identical.

Use the Contact Us form and choose Privacy / account data to describe your request and the account concerned. Proportionate identity verification may be needed; do not include a password or identity document in an initial message. Automated account export and self-service account deletion are not implemented.

13. International processing

The operator is based in India. When enabled, Google services may process information in other countries under their own published terms. The production hosting region and any other cross-border arrangements will be disclosed before launch. We do not claim that all information remains in India.

14. Children and younger learners

KeyTute is an educational service, but its account system does not currently perform age verification or collect verified parental consent. No universal minimum age is asserted here. See Children & Minor Privacy for the current limitations and request guidance.

15. Security and policy changes

The application uses mechanisms such as password hashing, CSRF protection and ownership checks for private results. Protection also depends on production configuration, access control and the host. No system is guaranteed to be completely secure.

Policy versions and dates are shown above. Material changes to data practices require appropriate notice and, where required, a fresh choice. Publishing updated text alone does not authorize a new processing purpose.

16. Contact

Use the Contact Us form and choose Privacy / account data for privacy questions and requests. Legal Contact lists the operator and available deployment details. These documents remain development drafts while production details and review are pending.

17. Word Fall rounds

Word Fall sends round settings and timed letter/backspace events to the server to verify the requested result. The application retains the assigned word schedule, round timing and status, and verified performance summaries such as score, accuracy, speed and errors; it does not retain the submitted key-event log. Completed rounds started while signed in are linked to that account. Guest rounds use session ownership and are not added to a signed-in progress profile.

Each game has a separate sound preference stored in this browser using typelearn_game_sound_ followed by the game name. Changing it does not change the website-wide sound preference.

18. Typing Racer rounds

Typing Racer sends settings and timed character/Backspace events to verify a requested race result. The application stores the assigned passage, simulated rival pace, round timing and status, and verified performance summaries. The submitted key-event log is processed but not retained. Races started while signed in are linked to that account; guest results remain session-owned guest results. The game sound preference is separate and stored in this browser using typelearn_game_sound_typing-racer.

19. Key Defender rounds

Key Defender sends round settings and timed letter/Backspace events to verify the requested result. The application retains the issued target schedule, round timing and status, and verified performance summaries; it does not retain the submitted key-event log. Completed rounds started while signed in are linked to that account. Guest results remain session-owned guest results. Its separate browser sound preference uses typelearn_game_sound_key-defender.

20. Typing Treasure Hunt rounds

Typing Treasure Hunt sends settings and timed character/Backspace events to verify a requested result. The application retains assigned stage challenges, round timing and status, game coin totals and verified performance summaries; it does not retain the submitted key-event log. Completed journeys started while signed in are linked to that account. Guest results remain session-owned guest results. Its independent browser sound preference uses typelearn_game_sound_typing-treasure-hunt. Coins are game points with no monetary value.

21. Typing Escape Room rounds

Typing Escape Room verifies timed character, Backspace and hint events. Submitted input logs are not retained. Assigned puzzles, round timing, hint totals and verified performance summaries are retained; rounds started while signed in are linked to your account. Guest rounds stay session-owned. Sound uses the independent typelearn_game_sound_typing-escape-room browser preference. Coins, stars and badges are game rewards with no monetary value.

22. Personal goals and personalized English practice

When you save personal goals, we store your daily practice-minute target, weekly practice-day target, speed and accuracy targets, focus preference and chosen timezone with your account. You can change or reset these targets without deleting practice history.

Goal progress and game dashboards are calculated from completed account-owned activity. English practice recommendations use up to twenty recent English session summaries, including recorded mistaken keys and words when available. Guest browser history is not imported into your account, and personalized account sessions do not use unrelated browser-local history. No additional complete typed-text log is created for these features.

23. Contact form and private support inbox

The operator is keytute, based in India. Our contact form is the primary route for support, privacy and content requests; no public support email is currently provided.

When you submit the form, we store your name, email supplied for follow-up, chosen topic, subject, message, privacy acknowledgment and submission time. If you are signed in, we also record the submitting account. The administrator can view the message, change its handling status, add private notes and delete it. Messages are not publicly displayed and are not used by this feature for marketing.

A necessary session token prevents replayed forms from creating duplicate messages. Temporary keyed digests of the connection address and supplied email enforce abuse limits; raw connection addresses are not stored on contact messages. Rate-limit records expire for enforcement purposes but are not automatically deleted from the database. Hosting infrastructure may keep separate access logs.

Messages and private notes remain in the inbox until the administrator deletes them. Marking a message Resolved or Spam does not delete it. Retain information only while needed to handle the request, follow-up, abuse investigation or an applicable obligation; the production operator must maintain an actual retention and backup-deletion process. No automatic purge or universal legal deadline is claimed.

We do not send an automatic email receipt. A supplied email is for request handling if follow-up is needed, not a verified account identity. For access, correction or deletion requests, choose Privacy / account data and provide an ordinary account reference; further proportionate verification may be required. Do not send passwords, payment credentials or identity documents in the form.

24. Common exam sets and custom exam source text

Exam Practice provides twenty shared English typing sets using a common KeyTute practice benchmark. These sets do not represent a named examination or organisation. Existing historical attempt records retain the settings and source snapshots issued when they started.

Custom Exam Typing lets you paste English source text and select duration, speed/accuracy targets and Backspace rules. Starting a test stores the pasted source privately in the exam attempt together with its settings, timing and ownership. Typed text and edit events follow the existing exam checkpoint and scoring process. This differs from ordinary Custom Practice, which does not persist its source text in the application database.

Custom exam passages are not added to the shared Content Library or public typing-set catalogue. Signed-in attempts belong to the account; guest attempts require the owning session. The form uses a necessary signed session token to avoid duplicate starts. Do not paste confidential documents, passwords, personal records or text you do not have permission to use.

25. Account sign-up and login

Accounts use the email and password entered on this website. Credentials are checked against our application database; no external identity or email-login provider is used. Passwords are stored as salted one-way hashes, not readable plaintext passwords.

Registration activates the account immediately without an email link, OTP or mailbox-ownership verification. A supplied email is an unverified account identifier and is not proof that the person registering owns that mailbox.

There is no Forgot Password option, self-service password reset or password-recovery email. Keep your login details safe. The Contact Us form remains available for support and privacy requests, but submitting a message does not automatically reset a password or establish account ownership.

26. Google advertising and your choices

KeyTute supports Google AdSense on selected public content pages. Advertising remains disabled until the publisher account, approved domain and separate advertising consent integration are configured. Active typing sessions, game play windows, results, account pages, contact forms and policy pages do not load this advertising integration.

When advertising is enabled, Google and its advertising partners may use cookies or similar technologies to serve and measure ads. Advertising cookies can allow Google and its partners to show ads based on visits to this and other websites. Where personalized ads are offered, you can manage personalization through Google My Ad Center and manage or withdraw website advertising consent through the advertising consent service.

Google advertising information: https://policies.google.com/technologies/ads. Google privacy information: https://policies.google.com/privacy. Personalization choices: https://myadcenter.google.com/. Third-party advertising choices: https://www.aboutads.info/choices/. Actual advertising providers and storage details will be published before ads are enabled.

Configured contact information

Brand

KeyTute

Operator / legal entity

keytute

Country

India

Support

Contact form — General support

Privacy contact

Contact form — Privacy / account data

Copyright contact

Contact form — Copyright / content

Mailing address

Not published; use the contact form

Governing jurisdiction

India; applicable mandatory user protections remain unaffected. No exclusive court or arbitration forum is specified.

Hosting / service providers

The website and PostgreSQL database are hosted by Amazon Web Services in the Asia Pacific (Sydney), Australia region. Private support messages and account/progress information are stored on this server. Support and privacy requests use the Contact Us form.

Retention criteria

Account and practice records remain in the database until the operator deletes them in response to a verified request or an operational need. Contact messages and private notes remain until an administrator deletes them; marking a message resolved does not delete it. No automatic account or message purge is currently configured. Container logs are rotated by size with at most three 10 MB files per service; this is not a fixed time-based retention promise. Automated backups and snapshots are not enabled for this launch.

International processing

Server processing takes place in Australia, outside the India-based operator country and possibly outside the visitor country. Pages may request Google Fonts. Google Analytics is optional and consent-gated; its provider may process data internationally under its own terms. Advertising is currently disabled. Review provider processing and applicable safeguards before enabling additional services.

Send a message through our contact form. Choose Privacy / account data or Copyright / content for the relevant request.

Google information and advertising choices

Google Privacy Policy · How Google uses advertising cookies · Google My Ad Center · Other advertising choices