1. In short
We use only cookies and browser storage that are strictly needed for the Service to work and stay secure. We use no advertising, analytics or tracking cookies, so we do not show a consent banner. If that ever changes, we will ask first.
2. What we store
| Name | Where | Purpose | Kept |
|---|---|---|---|
Sign-in session (sb-…-auth-token) | dash. and admin., browser storage | Keeps you signed in to your dashboard | Until you sign out |
steps-theme | dash. and admin., browser storage | Remembers light or dark theme | Until you clear it |
| Service worker | dash. | Lets the dashboard be installed as an app and show phone alerts; it stores no pages | Until you remove the app |
Cloudflare security cookies (e.g. __cf_bm) | All sites | Bot and abuse protection by our hosting provider | Up to 30 minutes |
| Cloudflare Turnstile | Sign-up and sign-in forms | Checks that a person, not a bot, is signing up | Session |
CF_Authorization | admin. (staff only) | Staff access control | Up to 24 hours |
Payment pages are hosted by Stripe, which sets its own cookies under its own cookie policy.
3. Your choices
You can delete cookies and site data in your browser settings at any time. If you block them, signing in to your dashboard will not work, but steps.trade itself can still be read. Questions: [email protected].