This page describes what data NepaliType collects from people who use the site, why it exists, and the choices you have over it. The intent is to be honest and short. If something is unclear, write to us via the in-app feedback button.

What we collect

Account details. When you register we store your username, email address, and a hashed password. We never store your plaintext password.
Practice sessions. Each completed typing session records the language, layout, duration, words-per-minute, accuracy, and the keystroke errors that drove the drill suggestions. The underlying text you typed is not retained beyond the session window.
Cookies. A short-lived refresh-token cookie keeps you logged in. A vertical-preference cookie remembers which site (NepaliType, Aksharflow, etc.) you came from so navigation stays consistent across pages.
Anonymous analytics. Aggregate usage signals such as which pages get viewed and which features get used. These are attached to a session id, not your account.

What we do not collect

Payment details. When the paid plan ships, payment processing runs through Stripe. We do not see or store your card number.
The text you draft. The romanized → Devanagari tool runs entirely in your browser. Whatever you type stays on your device.
Third-party trackers. No advertising pixels, no social-media trackers, no off-platform fingerprinting.

How we use it

We use the data above to keep your account working, show you your progress over time, suggest drills based on your weakest characters, and improve the product. Aggregate usage signals help us decide which rough edges to smooth first.

Your choices

Edit or remove your account. Open Settings and use the export / delete controls. Account deletion is permanent and removes your sessions, achievements, and any drill data tied to your account.
Practise without an account. The romanized tool and the public landing pages work without signing in.
Stop us emailing you. We only email transactional messages today (e.g. password resets). If we ever introduce marketing email, it will be opt-in, with an unsubscribe link in every message.

Where data is stored

Account and session data is stored in a managed PostgreSQL database operated on our behalf. Backups are encrypted at rest. We do not sell or transfer your data to third parties for marketing.

Changes to this policy

Material changes will be reflected in the "Last updated" date at the top of this page, and called out in-app for active users. Substantive changes that affect existing accounts will be announced before they take effect.

Contact

Use the in-app feedback button (bottom-right of every page) for privacy questions, data-export requests, or account deletion if Settings is not working for you. We aim to respond within a few business days.