Privacy Policy

Draft. This template has not been reviewed by a lawyer. Have counsel review it before relying on it, especially for GDPR, UK GDPR, and CCPA/CPRA obligations.

Effective July 19, 2026

What we collect

• Questions and flags you submit. Used to generate and improve public guides.
• An anonymous session cookie. A random identifier only. No name, email, or account. It lets you return to guides you started; it contains no personal information.
• A rate-limit signal derived from your IP. We store a one-way hash of your IP address (not the address itself) to enforce fair-use limits.
• Basic technical/usage data such as view counts.

Cookies

We use a strictly necessary session cookie and a cookie that records that you have seen this notice. We do not use advertising or cross-site tracking cookies.

Third parties

• Google (Gemini API). The text of your questions and flags is sent to Google to generate guides. Google's handling is governed by its own terms. Do not submit sensitive information.
• Cloudflare. Hosting, storage, and network security.

Public content

Generated guides are public and shared with everyone. Write questions accordingly; do not include private details.

Selling data

We do not sell your personal information.

Retention

Guides are retained while useful. Rate-limit and session records are retained short-term for abuse prevention and then pruned.

Your rights

Depending on where you live, you may have rights to access, correct, or delete personal data, or to object to processing. Because we intentionally collect almost no personal data and require no account, most requests are limited in scope. [Your lawyer should confirm your GDPR/CCPA obligations and add a rights-request process.]

Who operates Stepwise

Stepwise is currently operated by an individual as a sole proprietorship, not a registered company. This section will be updated if that changes.

Contact

[YOUR CONTACT EMAIL]