Privacy Policy

Last updated: May 25, 2026

KeyDown ("we", "us", "our") is a product of Eternity Cat, LLC. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

By using KeyDown at keydown.io, you agree to the practices described below.

KeyDown is free and open source — there are no paid plans and we do not process payments. If you self-host the software from our GitHub repository, this policy only applies to the version we operate at keydown.io.

What We Collect

Account Data

When you create an account, we collect:

• Email address
• Display name (if provided)
• Authentication data via Firebase Authentication (Google sign-in, GitHub sign-in, or email/password)

Typing Data

When you use the trainer, we collect:

• Keystroke timing and accuracy per character
• Words per minute (WPM) and accuracy metrics per session
• Error patterns and n-gram statistics used by the adaptive engine
• Session duration and word count

We do not record the raw content of what you type outside of the trainer interface. Typing data is used solely to power the adaptive engine and generate your statistics.

Technical Data

We automatically collect:

• IP address
• Browser type and version
• Device type
• Pages visited and feature usage
• Cookies and similar identifiers
• App performance metrics (page load times, network latency) via Firebase Performance Monitoring
• Device attestation signals via Firebase App Check (used to protect our backend from abuse; no personal data is collected)

How We Use Your Data

We use collected data to:

• Provide and improve the typing trainer and adaptive engine
• Generate your personal typing statistics and progress charts
• Send transactional emails (account confirmation, password reset)
• Detect and prevent fraud and abuse
• Analyze aggregate, anonymized usage patterns to improve the product

We do not sell your personal data to third parties.

Data Sharing

We share personal data only with:

• Google Cloud / Firebase — for hosting, authentication, database (Cloud Firestore), file storage (Cloud Storage), analytics (Google Analytics), performance monitoring, and app integrity verification (App Check).
• GitHub — if you sign in with GitHub, we receive your GitHub email address and profile information as part of the authentication flow. See GitHub's Privacy Statement.
• Law enforcement or legal authorities — if required by applicable law or legal process.

We may publish anonymized, aggregate typing statistics (e.g., "most common error patterns when switching keyboard layouts") on our blog or in marketing materials. This data cannot be traced back to individual users.

Cookies and Analytics

We use essential cookies for authentication and session management. We use Google Analytics (via Firebase) to collect anonymized usage data such as page views, session duration, and feature usage. This helps us understand how the product is used and where to focus improvements. Google Analytics may set its own cookies. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on. We do not use advertising or third-party tracking cookies.

Data Retention

Account and typing data are retained for as long as your account is active. When you delete your account, your typing data and personal information are deleted.

Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@keydown.io.

For EU/EEA Users (GDPR)

Our legal bases for processing your data are:

• Contract performance — processing typing data and account information is necessary to provide the service you signed up for.
• Legitimate interest — fraud prevention, product improvement, and aggregate analytics.

Your data may be transferred to the United States for processing by our service providers (Firebase/Google Cloud). These transfers are protected by Standard Contractual Clauses and the EU-US Data Privacy Framework.

For California Users (CCPA)

We do not sell or share your personal information as defined by the CCPA. You have the right to know what data we collect, request deletion, and opt out of any future sale of personal information.

Data Security

We protect your data using:

• HTTPS encryption for all data in transit
• Firebase Authentication for secure account management
• Access controls limiting who can access production data

Children

KeyDown is not directed at children under 16. We do not knowingly collect data from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top reflects the most recent revision.

Contact

For privacy-related questions or requests:

• Email: privacy@keydown.io
• Company: Eternity Cat, LLC
• Address: 16192 Coastal Hwy, Lewes, Delaware, 19958
• Phone: +1 (302) 490-3046