Privacy Notice

TypeSpawn Privacy Notice

Version 2026-09-25 · Effective when TypeSpawn accounts open

The short version

• You can play as a guest. Guests' progress stays in their own browser and nothing is stored on our servers.
• Accounts are for people 13 and older, or for children with a parent's consent.
• Other players see only the player name you choose. We never show your email address or your Google name.
• No ads, no advertising trackers, no third-party analytics. We don't sell or share personal information.
• You can delete your account from the account menu at any time.

Who we are

TypeSpawn (typespawn.com) and Keyboarmon (keyboarmon.com) are operated by Kosma Co LLC, Las Vegas, Nevada, USA ("we"). Privacy questions and requests: privacy@typespawn.com.

What we collect

Guests

Nothing on our servers. Your settings, progress and typing stats are saved in your browser's local storage on your device. You can clear them from your Profile or your browser. If you later create an account, you can choose to copy them to it once.

Players with an account (13 and older)

• From Google, if you sign in with Google: your name, email address, language preference and profile picture, as Google shows you before you continue. We keep the email address and an account identifier. When you finish signing up we remove your Google name and picture from your account, and we never show them to anyone.
• If you use an email link: your email address.
• What you give us: your player name and color, an optional alpha access code, and whether you want news emails.
• Age bracket: whether you are 13 or older. We don't keep your birth month or year.
• Your agreement: which versions of our Terms and this notice you accepted, when, and how you signed in.
• Sign-up source: which page or button brought you to sign-up.
• Gameplay: match results, XP, level, achievements and records, and your typing stats: which keys you press and fix, how fast you type letter pairs, and the words you type in matches (your dictionary). Our server checks each match report to keep progress fair, and keeps flagged reports for review.
• Friends: who you've added as a friend, pending requests, and notifications such as a friend earning an achievement. Friends see your player name, color, level, badges and achievements, never your email.

Parents and guardians

Your email address and sign-in details, your statement that you are the child's parent or legal guardian and 18 or older, your agreement to our Terms and this notice, and whether you want news emails.

Automatically

Our hosting provider and Google's sign-in and database services process technical data such as IP address, browser type and request times to deliver and secure the service. If abuse protection (Google reCAPTCHA) is enabled on sign-up, it assesses the browser session to block automated sign-ups.

How we use it

• To create and run your account, and let you sign in.
• To show your player name, level and badges to other players, and your achievements to your friends.
• To give you feedback on your typing (your Profile's stats, charts and coach's notes).
• To keep TypeSpawn safe: prevent abuse, enforce our Terms, and secure accounts.
• To send service emails, such as sign-in links and important account notices.
• To send news and launch updates, only if you opted in. Every news email has an unsubscribe link.
• For parents: to email you when kid accounts open, and to ask for and record your consent.

If you are in the EEA or UK, our legal bases are: performing our contract with you (your account), our legitimate interests (security and abuse prevention), your consent (news emails, which you can withdraw), and legal obligations.

Children under 13

TypeSpawn is designed with children in mind and follows the U.S. Children's Online Privacy Protection Act (COPPA).

• Everyone who signs up is asked their birth month and year in a neutral way. Children under 13 can't create an account themselves; they are asked to get a parent, and nothing is collected from them.
• During the alpha, parents can create a parent account and join the list for kid accounts. We collect nothing about the child at this stage.
• When kid accounts open, we will collect a child's information only after a parent gives verifiable consent, and only what the game needs: a generated player name (children can't type their own), birth year, the link to the parent or class, and game stats. Kid profiles are private, kid accounts can't add friends or send notifications, chat is limited to preset phrases, and multiplayer connections go through a relay so other players never see the child's IP address.
• Parents can review their child's information, refuse further collection, and have it deleted at any time by contacting privacy@typespawn.com or from the parent dashboard once it launches.
• Inactive kid accounts are deleted after 12 months.

If you believe a child under 13 has given us personal information without a parent's consent, contact us and we will delete it.

Who else processes data

We use service providers who process data for us under contract, only to run TypeSpawn:

• Google (Firebase and Google Cloud): sign-in, database and server functions. Data is stored in the United States.
• Google Identity Services: the Sign in with Google button on the sign-up and sign-in pages is served by Google. Using it is also covered by Google's Privacy Policy. It isn't loaded for guests or anywhere else on the site.
• Netlify: website hosting.
• PeerJS signaling service: introduces players' browsers when they join a multiplayer room. Game data then goes directly between browsers (peer-to-peer), so players in a room can see each other's IP addresses. Rooms with kid accounts will use a relay instead.

We don't sell personal information, share it for cross-context behavioral advertising, or let advertisers or data brokers access it. We may disclose information if the law requires it, to protect people's safety, or as part of a business transfer, under the same protections.

Cookies and local storage

TypeSpawn doesn't use advertising or analytics cookies. We use your browser's local storage for settings, guest progress and to keep you signed in. Google's sign-in button and sign-in window may set Google cookies needed for signing in.

How long we keep data

• Account data: while your account exists. When you delete your account, we delete your profile, account record, agreement history, sign-up records and saved rules right away, and remove your sign-in. We keep only a one-way code and date showing a deletion happened.
• Parent waitlist: until kid accounts open and you set one up or tell us to stop, and in any case no longer than 12 months after kid accounts launch.
• Service logs kept by our providers: typically up to 30–90 days.

Your choices and rights

• Delete: use Delete account in the account menu, or email us.
• Access, correct or get a copy: email privacy@typespawn.com. You can change your player name and color in the game.
• News emails: unsubscribe from any news email, or ask us.
• California and other U.S. states: you have rights to know, delete, correct and opt out. We don't sell or share personal information, so there is nothing to opt out of. We won't treat you differently for using your rights. You can appeal a decision by replying to our response.
• EEA and UK: you can also object to or restrict processing, and complain to your data protection authority.

We answer requests within 30 days (45 where state law allows), and may need to confirm it's really you first.

Security

There are no passwords to leak: sign-in uses Google or one-time email links. Data is encrypted in transit and at rest by our providers. Player records that affect progression can only be changed by our servers, and access rules deny everything else by default.

Changes

If we change this notice in a meaningful way, we'll update the version above and ask account holders to review it before continuing to use their account.