The short version
- We collect as little as we can: your email, a password, a name for the game and which plan you’re on.
- Your scores, stats and settings are saved on your own device, not on our servers.
- We never sell your data, never show adverts and never use tracking or advertising cookies.
- Card payments go straight to Stripe. We never see your card number.
- You can ask to see your data, fix it or delete your account at any time.
1. Who we are
StepOver (“we”, “us”) runs the website and game at stepover.uk. We are the “data controller” for the personal information described here, which means we decide how it’s used and we’re responsible for looking after it under UK data protection law (the UK GDPR and the Data Protection Act 2018).
You can reach us at support@stepover.uk.
2. What we collect
| What | When | Details |
|---|---|---|
| Account details | When you create an account | Your email address, a password (stored scrambled, so even we can’t read it), the name or nickname you choose, and that you confirmed your age. |
| Your plan | When you sign up or buy Pro | Whether you’re on Free, Pro or Pro+, the date you bought Pro, and a customer reference from Stripe so we can match your payment to your account. |
| Payment details | When you buy Pro | Handled by Stripe, not us. Stripe collects your card details and billing information. We only receive confirmation that you paid, the amount and the reference. |
| Messages | When you email us | Your email address and whatever you write, so we can reply. |
| Technical logs | Whenever you visit | Like every website, our hosting (Cloudflare) briefly records technical details such as your IP address, browser type and the pages requested, to keep the site running and protect it from attacks. |
We don’t collect your location, contacts, photos or anything from your camera or microphone. We don’t use analytics or advertising trackers.
3. Why we use it (and the legal reasons)
| Purpose | Legal reason |
|---|---|
| Creating your account, signing you in, resetting your password and unlocking the features of your plan | To provide the service you asked for (contract) |
| Taking payment for Pro and keeping records of sales | Contract, and the law (we must keep financial records for tax) |
| Replying to your emails | Our legitimate interest in helping the people who contact us |
| Keeping the site secure and working, and stopping misuse | Our legitimate interest in running a safe, reliable service |
We will only email you about your account (for example, a password reset or a receipt). We won’t send you marketing emails unless you’ve said yes to them first, and you could say no again at any time.
4. What stays on your device
Your game settings, scores, leaderboards, stats and mat setup are saved in your browser’s storage on the device you play on. They are never sent to us. Leaderboards only show players on that same device. If you clear your browser data or use a different device, they won’t be there. Our cookies and storage page lists everything we save and has a button to wipe it all.
5. Who we share it with
We never sell your data. We only share it with the companies that help us run StepOver, and only what they need:
- Supabase runs our account database and sign-in system.
- Cloudflare hosts the website, protects it from attacks and forwards email sent to our @stepover.uk addresses.
- Stripe processes payments and, through its Managed Payments service, acts as the official seller for Pro purchases (handling tax and receipts). Stripe is responsible for the payment and tax information it collects, under Stripe’s privacy policy.
- Our email inbox provider stores emails you send us.
We may also share information if the law requires it, or to protect someone’s safety.
Links on our site to Amazon (for buying a dance mat) take you to Amazon’s website, where Amazon’s own privacy policy and cookies apply. If you buy something after clicking one, we may earn a small commission. Amazon doesn’t tell us who you are.
6. Where it’s stored
Some of the companies above are based in, or use computers in, other countries such as the USA. When your information leaves the UK, we make sure it’s protected to UK standards, using the safeguards the law allows (such as the UK’s data bridge with the USA or the UK’s approved contract terms).
7. How long we keep it
- Your account: until you delete it. You can delete it yourself on the account page, or ask us to.
- Sales records: 6 years after the purchase, because tax law requires it. Stripe keeps its own payment records.
- Emails: up to 2 years after our last reply, unless we need them for longer to sort out a problem.
- Technical logs: a short time, usually no more than a few weeks.
8. Younger players
StepOver is made for footballers of all ages, so we’ve tried to keep this simple. You need to be 13 or older to create an account yourself. If you’re under 13, a parent or guardian must agree and set up the account with you. Only someone over 18 (or a parent or guardian) should buy Pro.
We keep things private by default: there are no public profiles, no chat, no location tracking and no adverts. Leaderboards only show names on your own device. If you’re a parent and think your child has given us information without your permission, email us and we’ll delete it.
9. Your rights
You have the right to:
- get a copy of the information we hold about you;
- have wrong information corrected (you can change your name on the account page);
- have your information deleted;
- object to us using it, or ask us to limit how we use it;
- get your information in a format you can move to another service.
To use any of these rights, email support@stepover.uk from the address on your account. It’s free, and we’ll reply within one month.
10. Changes to this policy
If we change how we use your information, we’ll update this page and the date at the top. If it’s a big change, we’ll tell you by email or in the game before it happens.
11. Contact and complaints
Questions or worries? Email support@stepover.uk and we’ll help. If you’re not happy with how we’ve handled your information, you can complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk/make-a-complaint or by calling 0303 123 1113.