Privacy Policy

Welcome to BossTyper ("we," "us," or "our"), a competitive typing trainer and game operated by BOSS Software ("Blazendary") and accessible at bosstyper.com.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services. By using BossTyper, you agree to the practices described in this policy.

Account Information: When you create an account, we collect your email address, username, and display name. Authentication is handled through Supabase Auth (email and password, or Sign in with Google). When you sign up with email we ask for the year you were born, only to check that you are at least 13; we do not store it.

Typing and Game Data: We collect your typing scores (words per minute, accuracy), XP, level progression, game history, achievement progress, and leaderboard rankings.

Payments: If you subscribe to Boss Pro, payment is handled by Stripe. We never see or store your full card number. We keep your Stripe customer ID and whether your subscription is active.

Chat Messages: Messages you post in public chat are visible to everyone on the site and are stored with your username until you delete your account. We may remove messages that break our rules sooner.

Classrooms: If a teacher sets up a class, we store the teacher's account details and the class name and code. For each student we store the name they enter when joining (shown only to their teacher), an automatically generated public nickname, and their typing progress. Students who join with a class code do not need an email address or password.

Notifications: If you turn on push notifications, we store your browser's push subscription so we can send the alerts you chose. You can turn them off at any time.

Usage Data: We keep visit logs, described in section 5.

Guest Users: If you play without an account, we may store limited score data associated with a temporary session identifier. No personal information is required to use BossTyper as a guest.

We use the information we collect to:

• Provide and maintain the BossTyper typing game and its features
• Track your typing progress, XP, levels, and achievements
• Display leaderboards and competitive rankings
• Enable multiplayer features (races, arenas, bot races)
• Send service-related communications (e.g., account verification)
• Improve and optimize the application

We do not sell your personal information to third parties.

Your data is stored in a Supabase-managed PostgreSQL database hosted in the United States. We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication tokens, and row-level security policies to protect your data.

While we take reasonable precautions to protect your information, no method of transmission over the Internet or electronic storage is 100% secure.

Authentication Cookies: We use cookies and local storage to maintain your login session and user preferences.

Visit Logs: When you load a page on BossTyper, we record your IP address, approximate location (country, region and city, derived from your IP address), user agent string, the page you visited, and the referring URL. If you are signed in, your username and user ID are recorded alongside the visit. These logs are used solely for site security, abuse prevention, and understanding usage patterns; they are visible only to BossTyper administrators, are not shared with third parties, and are deleted automatically after 13 months.

Location Cookie: We store the two-letter code of the country you are browsing from (worked out from your IP address) in a cookie that lasts one day. We use it only to decide whether ads appear and whether Boss Pro is available where you are.

Google AdSense: We do not show ads to visitors in the European Economic Area, the United Kingdom or Switzerland, and Google's ad code does not load for them. Elsewhere, we use Google AdSense to serve advertisements. Google may use cookies and web beacons to serve ads based on your prior visits to BossTyper or other websites. You can opt out of personalized advertising by visiting Google Ads Settings.

Analytics: We do not use Google Analytics or other third-party analytics tools. Our own visit logs, described above, are the only usage tracking on the site.

BossTyper uses the following third-party services:

• Supabase — authentication and database (stores account and game data)
• Vercel — hosting and deployment
• Stripe — payment processing for Boss Pro
• Google — Sign in with Google, and advertising through Google AdSense
• Resend — sending email, such as password resets and replies to schools
• Your browser's push service — delivering notifications you turned on

These providers process data in the United States. Where data about people in the EEA, UK or Switzerland is transferred, it is protected by the providers' Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

Each of these services has its own privacy policy governing how they handle data. We encourage you to review their policies.

BossTyper is used in educational settings, including schools and classrooms. We are committed to protecting the privacy of children under 13 years of age.

We do not knowingly collect personal information from children under 13 without verifiable parental or school consent. If BossTyper is used in a classroom setting, we rely on the school to obtain appropriate parental consent under COPPA and applicable laws.

The only information collected from student accounts is what is necessary to provide the typing education service: username, typing scores, and progress data. We do not serve personalized advertisements to users identified as children under 13.

If you are a parent or guardian and believe your child has provided personal information without your consent, please contact us at dev@blazendary.com and we will promptly delete the information.

If you are located in the European Economic Area (EEA), the United Kingdom or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) and equivalent local laws:

• Right of Access — request a copy of your personal data
• Right to Rectification — request correction of inaccurate data
• Right to Erasure — request deletion of your data ("right to be forgotten")
• Right to Data Portability — request your data in a machine-readable format
• Right to Object — object to processing of your data for certain purposes
• Right to Restrict Processing — request limitation of how we use your data

Our legal bases for processing your data are: (a) performance of our contract with you, to provide your account, scores, Pro subscription and the rest of the service; (b) our legitimate interests in keeping the site secure, preventing abuse and improving the service, for example through visit logs; and (c) your consent, where the law requires it, such as for push notifications. You can withdraw consent at any time. We do not show ads in the EEA, UK or Switzerland.

To exercise any of these rights, contact us at dev@blazendary.com. We will respond within 30 days. You also have the right to complain to your local data protection authority.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know — request what personal information we collect, use, and disclose
• Right to Delete — request deletion of your personal information
• Right to Opt-Out — opt out of the sale of personal information (we do not sell your data)
• Right to Non-Discrimination — we will not discriminate against you for exercising your rights

To submit a request, email us at dev@blazendary.com. We will verify your identity and respond within 45 days.

All BossTyper users have the right to:

• Access your personal data through your profile page
• Update your username and display name at any time
• Delete your account and all associated data through the account settings
• Play as a guest without providing any personal information

If you delete your account, we will remove your personal data from our active databases. Some anonymized, aggregated data (e.g., total games played counts) may be retained.

We retain your account and game data for as long as your account is active. If you delete your account, your personal data will be removed within 30 days. Anonymized, aggregate statistics may be retained indefinitely.

Guest score data that is not associated with an account may be retained indefinitely for leaderboard purposes.

Visit logs are deleted automatically after 13 months. Payment records are kept by Stripe for as long as tax and accounting law requires, even after you delete your account.

We may update this Privacy Policy from time to time. If we make material changes, we will notify users by posting the updated policy on this page with a new effective date. Your continued use of BossTyper after changes are posted constitutes your acceptance of the revised policy.

If you have any questions about this Privacy Policy or your personal data, please contact us: