Home/Privacy Policy

Privacy Policy

Fill in before going live Replace every [bracketed placeholder] with your real details. Delete any section that doesn't apply to your site — a policy describing things you don't actually do is just as wrong as a missing one.

1. Data Controller

The party responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Elias Suokko
E-Mail: Stepwise.info@proton.me

2. General

Personal data is any data relating to an identifiable person. We process such data only to the extent necessary to operate this website, or where you have given consent.

This website is used to present and sell digital products. There is no registration, no user account, and no newsletter.

3. Hosting and Server Log Files

This website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

When you visit this site, data automatically transmitted by your browser is processed:

IP address of the requesting device
Date and time of access
Name and URL of the file retrieved
Amount of data transferred
Notification of successful retrieval
Browser type and version, operating system
Where applicable, the previously visited page (referrer)

Purpose: Delivering the website, ensuring system security and stability, defending against attacks.
Legal basis: Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free and secure operation of the website.
Retention period: Log files are automatically deleted after 14 days.

If the hosting provider processes data outside the European Union, this is based on standard contractual clauses under Art. 46 GDPR. Further information is available in the provider's privacy policy: www.cloudflare.com/privacypolicy

4. Google Fonts

This website embeds fonts from Google Fonts, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit the site, your browser connects to Google's servers. In the process, your IP address is transmitted to Google and may be transferred to the United States.

Purpose: Consistent, accessible display of typography.
Legal basis: Art. 6(1)(f) GDPR, legitimate interest in an appealing presentation.

Google's privacy policy: policies.google.com/privacy

Alternative without data transfer The fonts can also be self-hosted on your own server. That removes the connection to Google entirely, and this section can be deleted.

5. Browser Storage (Local Storage)

This website stores a single piece of information locally in your browser: your choice between light and dark theme. This information is not transmitted to us or to any third party, contains no personal data, and stays solely on your device. You can delete it at any time via your browser settings.

Legal basis: Art. 6(1)(f) GDPR. Since this storage is strictly necessary for the requested function, no consent under § 25 TDDDG (German Telecommunications-Digital Services Data Protection Act) is required.

No cookies are set for analytics, tracking, or advertising purposes.

6. Purchasing Digital Products

The purchase itself does not take place on this website. Clicking a buy button redirects you to an external payment provider:

To be added once LemonSqueezy shop is set up

Data collected there — typically name, email address, payment details, and billing address — is processed by that provider under its own responsibility. We only receive the information necessary to process the order.

Legal basis: Art. 6(1)(b) GDPR (contract performance) and Art. 6(1)(c) GDPR (statutory tax retention obligations).
Retention period: Purchase-related data is retained in line with commercial and tax retention periods of up to ten years.

7. Delivery of Free Files

The free guide is delivered via an external cloud storage service. When you open the download link, that provider's own privacy terms apply:

TeraBox (terabox.com)

8. Contact via Email

If you contact us by email, we process your information solely to handle your inquiry.

Legal basis: Art. 6(1)(b) GDPR for contract-related inquiries, otherwise Art. 6(1)(f) GDPR.
Retention period: Until the inquiry is fully resolved, unless statutory retention obligations require otherwise.

9. External Links

This website contains links to external sites. We have no influence over their content or data processing. Sole responsibility for data processing on linked sites lies with the respective provider.

10. Your Rights

You have the following rights regarding your personal data:

Access (Art. 15 GDPR) — whether, and which, data we process about you
Rectification (Art. 16 GDPR) — having inaccurate data corrected
Erasure (Art. 17 GDPR) — unless retention obligations prevent it
Restriction of processing (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Objection (Art. 21 GDPR) to processing based on legitimate interests
Withdrawal of consent already given (Art. 7(3) GDPR), with effect for the future

An informal message to the email address above is sufficient to exercise any of these rights.

11. Right to Lodge a Complaint

Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your habitual residence or of the place of the alleged infringement. The competent authority is generally the supervisory authority of the German federal state where the data controller is based.

12. Data Security

This website uses TLS encryption. You can recognize an encrypted connection by the padlock icon in your browser's address bar and by the address starting with “https://”.

13. No Automated Decision-Making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

14. Changes to This Policy

We update this privacy policy whenever data processing on this website changes — for example through new features or services. The version published here is always the one that applies.

Last updated: September 2026

Note This is a carefully prepared template, not legal advice. As soon as you add analytics tools, a contact form, a newsletter, or embedded videos, this policy needs to be extended. If you're unsure, it's worth a quick review by someone with relevant expertise.