Privacy

Last updated 21 September 2026

Who is responsible for your data

[your name or company], [your address], Bulgaria. Contact: contact@settlesteps.com.

What we collect, and why

• Your account. When you sign up we store your username, your email and your password. The password is stored only as a one-way scrambled value, so nobody at Settle Steps can read it. We use this so you can log in and so we can reset your password.
• Your purchase. The payment form is shown on our page but is run by Stripe, which loads its own script when you start to pay and receives technical details such as your IP address to process the payment and prevent fraud. Stripe collects your payment details and billing country. We receive the payment status and the country. We use it to give your account access and to keep the accounting records the law requires.
• Your login cookie. One small cookie keeps you signed in for up to 30 days. It is needed for your library and the guide to open. It is not used for tracking.
• Your progress. The steps you tick off, and the route you last chose, are saved in your own browser. They are not sent to us.
• The free preview. When you try the preview, the countries and household choices you pick are sent to our server so it can build the result. We do not store them or link them to you.
• Emails. If you ask to reset your password, we send the link to the address on the account. If you write to us, we keep the conversation so we can help you.
• Server logs. Our hosting provider keeps standard logs (IP address, time, page requested) for security and to keep the site running.

This site has no advertising cookies, and its fonts are served from our own site rather than Google, so visiting a page does not by itself send anything to Google.

Analytics. On your first visit, a banner asks whether we may use Google Analytics to see which pages are useful. Nothing loads until you press Allow, and your choice is remembered so you are not asked again on this device. If you press Allow, Google Analytics sets a cookie and receives the pages you view; IP addresses are shortened before use. You can change your mind at any time by clearing your browser's local storage for this site, which brings the banner back. If your browser sends a Global Privacy Control signal, we treat that as Decline automatically. Declining, or not answering, means nothing is sent to Google Analytics at all.

Legal basis

We handle your purchase data to carry out our contract with you, and to meet legal duties such as tax records. We keep the site secure and working because we have a legitimate interest in doing so.

Who else handles your data

• Stripe, for payments.
• Google Analytics, only if you press Allow on the cookie banner.
• Netlify, for hosting the site and storing account details.
• Resend, for sending password reset emails.

Some of these providers process data outside the EU, including in the United States, under safeguards approved for that purpose. We do not sell your data.

How long we keep it

Payment records are kept for as long as tax and accounting law requires. Your account is kept until you ask us to delete it. Emails to and from us are kept for as long as needed to help you.

Your rights

You can ask to see your data, correct it, delete it, restrict its use, receive a copy, or object to how we use it. Write to us and we will answer within one month. You can also complain to the Commission for Personal Data Protection in Bulgaria, or to the data protection authority where you live.