Privacy

24.10.2026

What stays in your browser

Language, country, platform, tasks, notes and calculations are stored locally without automatic sync. Export creates a file on your device. Imports are processed in your browser and not uploaded. Replacing a plan saves one previous version in the same browser; restore or delete it in the backup section. Clearing browser data removes both the plan and this version. Do not enter identity documents, passwords or bank details.

Simple page counter

From 24 October 2026, the server stores only daily totals for each learning page: UTC date, page path without query parameters, and count. This counter uses no cookies, visitor identifiers, IP addresses, referrers, country, language or in-page actions. It helps us improve the content. Repeated loads and robot requests may be included; these are not unique people.

Only successful GET requests for learning pages reaching the server are counted. Service pages, redirects, prefetches and URLs with qa=1 are excluded. Browser Do Not Track and Global Privacy Control signals also disable counting. You can switch it off below: only on your explicit action do we save a one-year std-count=off cookie, the same for everyone with no identifier.

Previous session and event collection is disabled. Historical consent-based records remain available separately to the owner and are not combined with the new counter. Aggregate totals and previous analytics outside the last 90 calendar days are removed when counting or opening the owner report. Hosting separately processes technical requests and may keep operational logs.

Form protection uses a short-lived network-address hash cleaned up after two days, separately from analytics. Raw IP addresses are not written to the application database.

Feedback and deletion

Feedback is sent only when you submit it. We store the text, rating, stage context and optional reply email, visible only to the owner. Feedback older than 90 days is removed on new submissions or when the owner opens the inbox. For earlier removal, email anar6666@icloud.com with the date and text; use your original email if you supplied one. Do not send identity documents.

Use Reset to remove local plans; download a backup first. Aggregate totals do not allow us to find and remove an individual page request.

Assistant

When the online assistant is enabled, your submitted question and context (platform, selected residence country, language and step number) are sent to OpenAI to generate a response. StepToDrop does not write question text to its application database. A daily network-address hash is kept for rate limiting for up to seven days. Do not send passwords, identity documents or banking details.

External services

Shopify, eBay and other links lead to separate services with their own terms. Hosting can maintain its own technical logs and data-processing terms. StepToDrop does not receive your payment details or platform verification documents.