Privacy Policy

Last updated: September 2026

1. Who we are

King Typing is operated by Juan Carlos Saldaña Herrero, an individual based in Spain. References to "we", "us", or "our" in this policy refer to Juan Carlos Saldaña Herrero as the data controller.

Contact: jcarlossaldae@gmail.com

2. What King Typing is

King Typing is an online typing game where users type real news articles to earn in-game resources, build a 3D village, and compete against other players. It is not directed at children under 13. Users aged 13–15 must have parental or guardian consent before registering.

3. Data we collect

• Account data: name, email address, and hashed password (email registrations) or Google account ID (Google OAuth).
• Game data: typing speed and accuracy statistics, XP, ELO ratings, in-game currency (ink), building levels, and attack history.
• Usage data: pages visited, session duration, browser type, and device type, collected via PostHog analytics.
• Payment data: purchase history. Payment card details are processed entirely by Stripe and never stored on our servers.
• Chat and messages: direct messages and clan chat sent through the platform are stored in our database. These messages are not end-to-end encrypted. Do not share sensitive personal information in chat.
• Cookies: see our Cookie Policy.

4. Why we process your data

• Providing the game and managing your account — contract performance (GDPR Art. 6(1)(b))
• Processing payments via Stripe — contract performance (GDPR Art. 6(1)(b))
• Sending transactional emails (account confirmation, notifications) — contract performance (GDPR Art. 6(1)(b))
• Analytics to improve the game — legitimate interest (GDPR Art. 6(1)(f))
• Legal compliance — legal obligation (GDPR Art. 6(1)(c))

5. Third-party processors

We share data with the following processors solely to run the service. Each is bound by appropriate data processing agreements.

• Vercel — hosting and serverless infrastructure (USA; EU–US Data Privacy Framework)
• MongoDB Atlas — database hosting (data stored in EU region)
• Stripe — payment processing (USA; EU–US Data Privacy Framework)
• PostHog — product analytics (EU cloud, eu.posthog.com)
• Brevo (Sendinblue) — transactional email (France, EU)
• Google — OAuth authentication (USA; EU–US Data Privacy Framework)

We do not sell your personal data to any third party.

6. Children and minors

King Typing is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we become aware that an account belongs to a child under 13, we will delete the account and all associated data without notice.

Users aged 13–15 must have obtained parental or guardian consent before registering. By checking the consent box at registration, the user confirms they are 16 or older, or that a parent or guardian has reviewed and agreed to these terms on their behalf.

Parents or guardians who believe their child under 13 has created an account may contact us at jcarlossaldae@gmail.com to request deletion.

7. Chat and user-generated content

Messages sent through the in-game chat and direct messaging system are stored on our servers (MongoDB Atlas). They are visible to us for moderation purposes. Do not share personal information — such as your full name, address, phone number, or school — in any chat. Parents are encouraged to remind minors of this.

8. Data retention

We retain your account data for as long as your account is active. If you delete your account, your personal data is deleted within 30 days, except where retention is required by law (e.g. payment records for tax purposes, kept for 5 years under Spanish law).

9. Your rights (EU / GDPR)

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Object to processing based on legitimate interest
• Data portability (receive your data in a machine-readable format)
• Lodge a complaint with the Spanish data protection authority (AEPD) at aepd.es

To exercise any of these rights, email jcarlossaldae@gmail.com. We will respond within 30 days.

10. Your rights (California / CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how it is used
• Request deletion of your personal information
• Opt out of the sale of personal information — we do not sell your data, so no opt-out is needed
• Non-discrimination for exercising these rights

To submit a CCPA request, email jcarlossaldae@gmail.com.

11. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the latest revision. Continued use of King Typing after changes are posted constitutes acceptance of the updated policy.