Our commitments
Typing Gauge follows the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (PECR) and the Data (Use and Access) Act 2025. In practice:
- Lawful, fair and transparent. Every use of data has a lawful basis set out in our privacy notice.
- Purpose limitation. Test data is used for results, certificates, your history and keeping the service secure. Never for selling.
- Data minimisation. No account is needed. We don't keep the text you type, only the measurements.
- Accuracy. Scores are recalculated on our servers from what was typed, so they can't be altered in the browser.
- Storage limitation. Data is deleted automatically on the schedule below.
- Security. Encryption in transit, hashed passwords, random identifiers, access controls and rate limiting.
- Accountability. We keep records of processing, assess risks before launching new features, and review this guidance regularly.
How to use your data protection rights
Option 1: do it yourself, instantly (account holders)
- Sign in and open your dashboard.
- Under Your data, choose Download my data for a copy of everything linked to your account in a machine-readable (JSON) format. This covers your rights of access and portability.
- Choose Delete my account to permanently erase your account, results, practice history and certificates. This covers your right to erasure.
Option 2: ask us
- Use Contact Us and choose Data protection request, or email privacy@typinggauge.com. You don't need to use any particular wording.
- Tell us which right you want to use (access, correction, deletion, restriction, objection, portability or a review of an automated result) and the email address linked to your data.
- You'll get a reference number straight away.
- We may ask for information to confirm your identity. We only ask for what is needed, and the time limit starts once we have it.
- We respond within one month. For complex or multiple requests we may extend by up to two further months and will tell you why within the first month.
- Requests are free. We can refuse or charge a reasonable fee only if a request is manifestly unfounded or excessive, and we will explain why.
When you ask for access, we carry out a reasonable and proportionate search and provide your data, the purposes, recipients, retention periods, the source, and information about your rights.
Candidates in employer assessments
The employer is the controller of your candidate data, so please send rights requests and retake requests to the employer. If you contact us instead, we will forward your request to the employer promptly and help them answer it.
Complaints procedure
You can complain to us about how we have used your personal data, or about anything else.
- Tell us. Use Contact Us and choose Complaint, or email privacy@typinggauge.com. Our online form is available at all times.
- Acknowledgement. You receive a reference number immediately, and we acknowledge your complaint within 30 days of receiving it.
- Investigation. We investigate without undue delay, keep you updated, and tell you the outcome and any action we have taken.
- Escalation. If you're not satisfied, you can complain to the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. The ICO usually expects you to raise the issue with us first, but you can go to them at any time.
Retention schedule
| Data | Deleted after |
|---|---|
| Results taken without an account (no certificate) | 12 months, automatically |
| Certificates and their results | 5 years from issue, or sooner on request |
| Account data and history | When you delete your account |
| Employer assessment candidate data | 12 months after the assessment deadline (or after it was created, if there is no deadline), or sooner if the employer deletes it |
| Usage statistics events | 13 months, automatically |
| Contact messages and complaints | 2 years after they are resolved, automatically |
A scheduled job applies this schedule every day.
Personal data breaches
If a breach is likely to put people at risk, we report it to the ICO within 72 hours of becoming aware of it, and tell affected people without undue delay where the risk is high, explaining what happened and what they can do. We record every breach, whether or not it is reportable.
Children and young people
Typing Gauge is for people aged 16 and over, and account holders must confirm their age. In line with the ICO's Age Appropriate Design Code, the defaults protect privacy: nothing is public unless you share it, ads are personalised only with consent, statistics can be switched off, and we don't use nudge techniques to collect more data.
Guidance for employers
If you use Typing Gauge to assess candidates, you are the controller and we are your processor under our Employer Terms. You are responsible for:
- having a lawful basis for assessing candidates and telling them how you use their results (your candidate privacy notice);
- using results as one input among several, with a person making each hiring decision. Don't rely solely on automated scores;
- making reasonable adjustments for disabled candidates under the Equality Act 2010, for example offering an alternative format or giving a candidate a retake;
- handling candidates' rights requests (we'll help) and deleting candidate data when you no longer need it. You can delete a candidate at any time from your dashboard;
- keeping your account secure and limiting who can see candidate results.
Guidance for users
- Results and certificates should reflect your own unaided typing.
- Anything you put on a certificate, such as your name, appears on its public verification page.
- Don't include passwords, payment details or health information in messages unless needed.
- Results kept only in your browser are lost if you clear its storage. Create an account to keep them.
This guidance was last updated on 5 October 2026.