Privacy policy

At a glance

• Account details let you sign in and resume learning.
• Lesson completions and quiz results power your personal dashboard.
• Workbook files are processed in your browser.
• Save workbook stores a copy on the device and browser you are using.

Account information

With email/password sign-in, Sheetstep stores your name, email address, password hash, and session records in its account database. The password hash is used to verify your password. Your account information is used to authenticate you and display your dashboard.

When Clerk is configured, Clerk manages registration and authentication. Sheetstep stores your Clerk account reference, display name, and learning progress. Choosing Google sign-in also involves Google in the authentication process. Those providers handle information under their own privacy policies.

Learning information

Sheetstep records completed lessons, quiz scores, and skills answered correctly. These records are associated with your account and used to recommend your next lesson and show progress. Guest lesson completions are stored in a browser cookie so they can transfer when you create an account.

Workbook files and browser storage

Opening an XLSX file reads it in your browser. The current workbook feature does not upload the file contents to the Sheetstep server. Selecting Save workbook stores one workbook snapshot in browser local storage. Selecting Export .xlsx creates a download on your device.

Browser storage persists until you clear it or overwrite the saved workbook. Signing out leaves that browser copy in place. Someone with access to the same browser profile or device may be able to access locally stored data.

Cookies and their purposes

• The session cookie keeps you signed in for up to 30 days. Signing out removes that cookie and invalidates its session.
• The guest progress cookie lasts up to one day and remembers completed lessons.
• Clerk uses its authentication cookies when Clerk sign-in is enabled.

Blocking required cookies can prevent sign-in and progress transfer. Clearing browser storage also removes your locally saved workbook.

Service providers and access

Cloudflare hosts Sheetstep and its D1 account database. Authorized service administrators can access account records and operational logs to run and troubleshoot the service. Clerk and Google receive authentication information when those services are enabled and used. Data may be processed outside your country of residence.

To limit repeated sign-in attempts, Sheetstep stores a hash derived from the request IP address with an attempt counter and time window. Older counters are removed during subsequent authentication requests.

Retention and deletion

Account and learning records remain in the account database until removed by a service administrator. Account deletion currently requires a request to support.

You can remove browser copies by clearing site data for Sheetstep in your browser settings. This leaves server-side account and learning records in place. For access, correction, or deletion of those records, contact contact@velotica.ai. We may ask you to verify ownership of the account before acting on a request.

Payments

Sheetstep account registration does not collect card details or process payments. A payment provider and its data practices will be disclosed before paid plans become available.

Changes and privacy contact

We will update this notice when our storage, providers, or data uses change. For privacy questions or requests about Sheetstep by Velotica, contact contact@velotica.ai.