Privacy

If you never sign in

Nothing about you is stored on our server, apart from the error log described below. Your lesson results, your settings and the verses you have typed stay in this browser (local storage and IndexedDB) until you clear them.

A cookie named prefs remembers your color theme. It holds no identifier.

When you finish a book, and when you pass your tenth Learn lesson, the browser sends one anonymous count to our server.

After each Learn lesson, signed in or not, the browser also sends one anonymous count of that lesson's speed and accuracy, rounded down to the nearest 5 words per minute and the nearest whole percent (for example, 40 wpm and 96%). The Profile page compares your speed and accuracy with these counts from the last 90 days.

Each of these requests carries only the counter's name: no cookie, no id, not the text you typed, nothing else. We keep a daily total per counter and do not record the address it came from. The daily totals are kept with no end date; with no id and no address in them, they cannot be traced back to you. These counts are the only thing that leaves a signed-out browser.

If you sign in

Signing in stores your email and your reading progress (which books and chapters you typed) so they follow you to other devices.

On our server we keep: your account (email, a display name, the date you joined, and whether you chose to stay anonymous); if you use Google, the Google account id, name, profile link and picture link Google sends us; pending sign-in links (deleted after 15 minutes or on use); your settings and lesson statistics; your best lesson results in a high-score list (kept for the high-score table, which is switched off); your reading progress per verse (speed and accuracy); and a session file that keeps you signed in for 14 days.

To stop abuse of sign-in emails we keep a salted hash of the email address and of the network address for one hour after each sign-in request. A table left from Keybr's paid tier (orders) exists but is always empty: there is nothing to buy.

Sign-in emails are sent by our email provider, which sees your address to deliver the message.

Server logs

When the server hits an error, its log records that request, including your network address. If a sign-in email fails to send, the log records the address it was for. We read the log only to fix faults. It is capped in size, and its oldest lines are deleted as new ones arrive.

Children

Accounts are for people 13 and older. The sign-in form asks for your birth year first; if you are under 13 you can keep typing without an account, and nothing is stored on our server.

Deleting your account

On your account page you can delete your account. That removes your account, your sign-in links, your settings, your lesson statistics and your reading progress from our server.

No trackers

There are no ads, no analytics and no third-party scripts on this site. Pages load only from this site and Cloudflare, which serves it.