Privacy Policy

Last updated: 23 June 2026

1. Overview

Type of Faith ("the Service") is a free, browser-based Bible typing practice app available at typeoffaith.com. We are committed to protecting your privacy. This policy explains what data we collect, why, and how we handle it.

2. Data We Collect

We collect different data depending on how you use the Service:

Without an account:

• Settings and preferences: stored in your browser's localStorage only. We never see this data.
• Practice session metrics (typing speed, accuracy, verse reference, and timestamp): sent anonymously to our server to power aggregate community statistics. No identifier links these sessions to you. Anonymous session records are purged after 30 days.

With an account (Google or Email sign-in via Firebase Authentication):

• Username (chosen by you at registration)
• Email address (from your Google account or provided at registration)
• Firebase user ID (a unique identifier assigned by Firebase)
• Authentication provider (Google or email/password)
• Typing scores, race results, streak data, and lesson progress

3. How We Use Your Data

• Leaderboards and multiplayer: Your username and scores are displayed on public leaderboards and in multiplayer lobbies.
• Authentication: Your email and Firebase ID are used solely to verify your identity and allow you to sign in across devices.
• Analytics: We collect anonymous usage events (page visits, feature usage, device type, typing speed, accuracy) to understand how people use the Service and improve it. These events do not include personally identifiable information.

4. Data We Do NOT Collect

• Passwords - Firebase Authentication handles all password storage; we never see or store your password.
• Full payment card details - card processing is handled entirely by Stripe. We never see or store your card number, CVV, or full billing address. We do store your Stripe customer ID, subscription status, and subscription dates to manage your Premium access.
• Location data
• Contacts or address book data

5. Third-Party Services

The Service uses the following third-party services:

• Firebase Authentication (Google): Handles sign-in and account security. Subject to Google's Privacy Policy.
• Stripe: Processes Premium subscription payments. Subject to Stripe's Privacy Policy.
• Google AdSense: Displays advertisements. May use cookies to serve relevant ads. Subject to Google's Privacy Policy.
• Render.com: Hosts the Service (web server). Subject to Render's Privacy Policy.
• Supabase: Hosts the database where account data is stored (EU West, Ireland). Subject to Supabase's Privacy Policy.
• Anthropic: Premium subscribers who use the AI Coach feature have anonymised typing metrics (WPM, accuracy, keystroke timing, and error patterns) sent to Anthropic's API to generate personalised coaching. No personal information, account details, or verse content is included in these requests. Subject to Anthropic's Privacy Policy.

6. Cookie Consent and Advertising

The Service uses Google AdSense to display advertisements. When you first visit, a consent banner asks whether you accept or reject personalised advertising cookies.

• If you accept, Google AdSense may use cookies to serve ads tailored to your prior visits to this website or other websites.
• If you reject, Google AdSense is still loaded but operates in non-personalised mode: ads are shown based on page content only, and no advertising cookies are set or used to track your browsing history.
• Your choice is saved in your browser's localStorage (key: tof_cookie_consent). You can reset it at any time to show the banner again on your next visit.
• You may also manage your personalised advertising preferences via Google Ad Personalization Controls.

7. Data Storage and Security

• The Service is hosted on Render.com.
• Account data is stored in a PostgreSQL database hosted on Supabase (EU West, Ireland).
• All connections use HTTPS encryption.
• Firebase Authentication handles credential security using industry-standard practices.
• We do not store your Google password or access token on our servers.

8. Data Sharing

We do not sell, rent, or share your personal information with third parties, except:

• Your username and scores are publicly visible on leaderboards.
• We may disclose data if required by law.

9. Your Rights

You can:

• View your data: Visit your Profile page to see what we store.
• Export your data: You can download a copy of all data we hold on you (profile, stats, lesson progress, typing history, and analytics events) from the Profile page using the "Export Data" button.
• Delete your account: You can permanently delete your account and all associated data from the Profile page using the "Delete Account" button. Deletion is immediate and cannot be undone.
• Clear local data: Clear your browser's localStorage at any time to remove all locally stored data.
• Revoke Google access: Remove Type of Faith from your Google account at myaccount.google.com/permissions.
• Opt out of analytics: You can disable analytics tracking by clearing your browser's localStorage or using a browser extension that blocks analytics scripts.
• Manage ad preferences: You can manage your advertising preferences via Google Ad Personalization Controls or by adjusting your browser cookie settings.

10. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Cookies

The Service uses localStorage (not cookies) for core functionality. Google AdSense cookies are only loaded if you accept them via the consent banner. Firebase Authentication may set its own cookies for sign-in. You can manage cookie preferences in your browser settings or by clearing the tof_cookie_consent key in localStorage.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. GDPR and International Users

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data protection laws, the following applies:

• Legal basis for processing: We process your data based on legitimate interest (providing and improving the Service), consent (where required for cookies and advertising), and contract performance (account features).
• Data retention: Account data is retained as long as your account is active. Locally stored data persists until you clear your browser storage. You may request deletion at any time.
• Right to lodge complaints: You have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.
• Data transfers: Your data may be transferred to and processed in the United States where our servers are located. We take reasonable steps to ensure your data is treated securely.

14. Contact

For questions about this Privacy Policy, contact us at hello@typeoffaith.com.