Privacy Policy
1. Who is responsible
Emirhan Demirci, Dr.-Wolf-Straße 7, 89415 Lauingen (Donau), Germany
Email: [email protected]
This policy explains what personal data we process when you visit stepstogo.dev and when you join the waitlist, under the EU General Data Protection Regulation (GDPR).
2. Visiting the website
The site is hosted on Cloudflare Pages by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you open a page, Cloudflare processes your IP address, the date and time, the requested URL, the referrer and technical data about your browser and device in order to deliver the page and keep it secure.
Cloudflare acts as our processor under a data processing agreement. Where data is transferred to the USA, this is covered by Cloudflare's certification under the EU-U.S. Data Privacy Framework and by standard contractual clauses.
Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in a secure and reliable website.
We set no cookies, store nothing in your browser, and use no analytics, advertising or tracking tools.
3. Joining the waitlist
If you join the waitlist, we store:
- your email address (required),
- your name and intended use, if you fill in those optional fields,
- which form you used, the time of sign-up, and that you gave consent.
Purpose: to tell you when early access to StepsToGo opens and to inform you about the launch.
Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time with effect for the future by emailing [email protected]. We then delete your entry. Withdrawal does not affect the lawfulness of processing before it.
Storage: the entries are kept in a Cloudflare D1 database that is restricted to EU jurisdiction. Cloudflare processes them on our behalf, with the same safeguards as described in section 2.
Retention: until you withdraw your consent, and at the latest 24 months after you signed up.
Providing this data is voluntary. Without an email address we cannot add you to the list. We do not use it for automated decisions, and we do not sell or share it with anyone else.
4. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on legitimate interests (Art. 15–21 GDPR). To use any of these rights, email [email protected].
You can also complain to a data protection authority, for example in the country where you live or work, or where the issue occurred (Art. 77 GDPR).
5. Changes
We update this policy when the site or the law changes. The date at the top shows the current version.