Privacy Policy

This Privacy Policy describes how Tedious Lab ("we," "us," or "our") collects, uses, and shares information when you use metyping.com (the "Service"). We encourage you to read this policy carefully.

1. Scope

This policy applies to all individuals who interact with the Service, including visitors, registered account holders, test participants, leaderboard users, and anyone who contacts our support team.

2. Information We Collect

Information you provide directly:

• Email address and password (or OAuth tokens from Google or other providers)
• Username and display preferences set during onboarding
• Profile information such as avatar, bio, country, and language selection
• Messages and attachments submitted through support requests

Performance and usage data:

• Typing test results including WPM, accuracy, character-level error data, and test duration
• Scores submitted to leaderboards and personal bests
• Session history, streaks, and progress metrics

Device and technical data:

• IP address and approximate geographic location
• Browser type, operating system, and device identifiers
• Page activity, referrer URLs, and click patterns via analytics tools
• Cookie data as described in our Cookie Policy

Third-party sources:

• Identity information from OAuth providers (e.g., Google) when you sign in via those services
• Aggregated analytics from third-party analytics platforms
• Payment and billing information from our payment processor (we do not store full card details)

3. How We Use Your Information

• To operate the Service, create and maintain your account, and authenticate your identity
• To display your scores on public leaderboards and compute rankings
• To generate personalized performance insights and recommendations
• To process payments for Pro subscriptions
• To send transactional emails (e.g., account verification, password reset, billing receipts)
• To send optional product updates and newsletters if you have opted in
• To detect, investigate, and prevent fraud, abuse, and violations of our Terms
• To comply with legal obligations
• To improve and develop new features of the Service

4. Legal Bases for Processing

Where applicable law requires a legal basis for processing personal data, we rely on the following:

• Contract performance — to provide the Service you requested
• Legitimate interests — to operate and improve the Service, prevent abuse, and ensure security
• Consent — for optional communications such as newsletters; you may withdraw consent at any time
• Legal obligation — where we are required to process data by applicable law

5. Public Information

By design, certain profile and performance data is public. This includes your username, avatar, selected country flag, language statistics, leaderboard scores, and earned achievements. This visibility is a core feature of the platform. You can review and limit your public profile from your account settings, but some leaderboard data may remain visible as part of the competitive record.

6. Cookies and Tracking

We use cookies and similar technologies for authentication, preference storage, analytics, and security. Please see our Cookie Policy for details and opt-out options.

7. Information Sharing

We do not sell your personal information. We may share information with:

• Service providers — infrastructure, analytics, payment processing, and email delivery partners who are contractually bound to use your data only to perform services for us
• Legal authorities — when required by law, court order, or governmental authority
• Business transfers — in connection with a merger, acquisition, or sale of assets, with appropriate notice to you
• Other users — only the public profile and leaderboard data you have chosen to make visible

8. International Data Transfers

Tedious Lab is based in the Republic of Korea. Your data may be processed and stored in South Korea and in other countries where our service providers operate. Where we transfer personal data internationally, we take appropriate safeguards (such as standard contractual clauses) as required by applicable law.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within a reasonable time, except where we are required to retain it for legal, tax, or compliance purposes. Anonymized or aggregated data (which cannot identify you) may be retained indefinitely for analytics.

10. Your Rights

Depending on your location, you may have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request that we delete your personal data ("right to be forgotten")
• Portability — receive your data in a structured, machine-readable format
• Objection / Restriction — object to or restrict certain processing activities
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise these rights, contact us at contact@tediouslab.com. We will respond within the timeframe required by applicable law.

11. California Residents (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act, including the right to know what personal information we collect and how it is used, the right to delete, and the right to non-discrimination for exercising your rights. We do not sell personal information. To submit a request, contact us at the address below.

12. EEA, UK, and Switzerland Residents (GDPR)

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have rights under the GDPR or equivalent legislation. Our legal bases for processing are described in Section 4. You have the right to lodge a complaint with your local supervisory authority if you believe your rights have been infringed.

13. Children's Privacy

The Service is not directed to children under 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us personal data without parental consent, please contact us and we will delete it promptly.

14. Security

We implement reasonable administrative, technical, and physical security measures designed to protect your personal data from unauthorized access, disclosure, alteration, or destruction. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

15. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by updating the effective date above and, where required, by sending a notification to your registered email address. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

16. Contact

Tedious Lab
63054 Hagwi Humansia, Aewol-up, Jeju-si, Republic of Korea
contact@tediouslab.com