Privacy Notice

Controllers, purposes, data, and legal bases

PANIC Studios Przemysław Dąbrowski, ul. Stefana Batorego 18/108, 02-591 Warsaw, Poland, controls FewerSteps-directed site, product, fulfillment, support, and business-record processing. Contact [email protected] for those privacy requests. Admission confirmations, assent records, order and payment references, entitlement, delivery, recovery, refund, complaint, and support records are processed to take requested pre-contract steps and perform the contract. Accounting, tax, mandatory-remedy, and regulatory records are processed to meet legal obligations. Security, abuse prevention, service reliability, incident response, and claims records are processed for legitimate interests and the establishment or defense of claims.

Sold through Link, LLC and applicable Stripe entities may act independently as controllers for Managed Payments transaction, payment, fraud, tax, refund, transaction-support, and regulatory processing, and may act as processors where the applicable data processing agreement says so. Those activities can involve identity and contact details supplied to the provider, payment and transaction data, device and fraud signals, tax location evidence, support communications, and regulatory records. Direct provider-controlled requests through Stripe's Privacy Policy and Privacy Center at https://stripe.com/privacy and https://stripe.com/legal/privacy-center. This notice does not characterize the parties as joint controllers.

Required data, recipients, and transfers

Required purchase, admission, assent, payment-reference, delivery, recovery, and support data is needed to complete or administer the requested transaction or request. Payment-card data is handled by the payment provider and is not stored by FewerSteps. Infrastructure providers may process connection and security metadata such as IP address, request time, requested path, browser or device headers, approximate location, and security signals for routing, reliability, and abuse prevention. FewerSteps does not use that metadata for advertising and does not persist it as source measurement.

Selected launch recipient categories are PANIC Studios personnel with an operational need, Google for the temporary consumer Gmail support mailbox, Sold through Link, LLC and Stripe entities for Managed Payments, DigitalOcean for application hosting, Neon under the applicable Databricks terms for the database, Cloudflare for network delivery and security, and required payment networks, financial institutions, accountants, tax authorities, regulators, courts, and professional advisers.

The temporary support route is a consumer Gmail account governed by Google's Terms of Service at https://policies.google.com/terms and Privacy Policy at https://policies.google.com/privacy. Google states that it does not act as a data processor for consumer Gmail and offers no consumer Gmail data processing agreement. Support email may be processed outside your country, including outside the EEA. Google publishes its transfer mechanisms at https://policies.google.com/privacy/frameworks. FewerSteps does not represent that the Google Workspace or Cloud Identity Cloud Data Processing Addendum applies to this account. Support email is limited to information necessary to handle the request. Do not send recovery codes, payment-card data, credentials, or business content.

FewerSteps uses applicable provider terms and published transfer safeguards for launch infrastructure. Official sources are Stripe's Data Transfers Addendum at https://stripe.com/legal/dta, DigitalOcean's DPA at https://www.digitalocean.com/legal/data-processing-agreement, Cloudflare's DPA at https://www.cloudflare.com/cloudflare-customer-dpa/, the Neon Product Specific Schedule at https://neon.com/platform-terms, the Databricks DPA at https://www.databricks.com/legal/dpa, and the Databricks subprocessor list at https://www.databricks.com/legal/databricks-subprocessors. Information about or copies of applicable safeguards may be requested at [email protected] once commerce is enabled.

Tracking choices and policy changes

Optional source measurement, marketing, advertising, profiling, and email capture are inactive. FewerSteps does not sell personal information, share it for cross-context behavioral advertising, or collect a person's online activities over time and across different websites. Because that tracking is not active, FewerSteps does not alter its behavior in response to Do Not Track or Global Privacy Control signals. Provider-controlled checkout or support services may collect information under their own notices when a person chooses to use them.

Material changes to this notice are published at its canonical URL with a new effective date and a conspicuous notice on the site. Direct notice is also provided where an appropriate contact channel is available and applicable law requires it.

Retention and rights

Necessary order, assent, refund, accounting, tax, dispute, complaint, and claims records are retained for the period required to administer the contract and meet legal or claims obligations, then deleted or anonymized. Recovery and access state expires with the 90-day access term. Essential cookies have the shorter maxima in the cookie notice. The offline workbook sends no project content to FewerSteps, and customer-held JSON and Markdown remain under customer control.

Depending on the legal basis and applicable limits, a person may request access, a copy, correction, erasure, restriction, portability, or object, and may withdraw consent where consent applies without affecting earlier lawful processing. Send PANIC Studios requests to [email protected]. Where GDPR Article 12 applies, PANIC Studios responds without undue delay and within one month. That period may be extended by two further months where necessary because of the complexity or number of requests, with notice and reasons provided within the first month. A person may complain to the President of the Personal Data Protection Office, Poland, at https://uodo.gov.pl/en/681.