Privacy policy
Last updated:
This policy explains which personal data we collect when you use togetherstepbystep.com, why we collect it, and what your rights are. We keep it to a minimum: no advertising, no tracking, and we never sell your data.
Who we are
This website is run by Diana advies en begeleiding (“we”, “us”), the controller responsible for your personal data. For any question about your data, email dianagoorhuis@gmail.com.
What we collect and why
When you visit the website
Like every website, our hosting provider Cloudflare processes technical data such as your IP address, browser type, the page you ask for and the time, so the pages can be delivered and the site is protected against attacks and abuse.
- Legal basis: our legitimate interest in a working and secure website (Article 6(1)(f) GDPR).
- How long: we do not keep our own visitor logs. Cloudflare keeps this data only as long as needed for operation and security.
When you sign in to the members area
The games area is only open to people we have invited. When you sign in with Google, Google shares your name and email address with Cloudflare. Cloudflare checks your email address against the list of invited addresses and records the sign-in (email address, time and IP address) in a security log.
- Purpose: to give you access and keep the members area secure.
- Legal basis: providing the service you asked for (Article 6(1)(b) GDPR) and our legitimate interest in security (Article 6(1)(f) GDPR).
- How long: your email address stays on the list of invited members until you ask us to remove it, or until we close the members area. Cloudflare keeps sign-in records for a limited time only.
When you email us
We receive your email address, your name and your message, and use them only to answer you and, if you wish, to arrange a consultation.
- Legal basis: steps you ask for before a possible agreement (Article 6(1)(b) GDPR) and our legitimate interest in answering your questions (Article 6(1)(f) GDPR).
- How long: we delete emails when they are no longer needed, and at the latest two years after our last contact, unless the law requires us to keep them longer (for example invoices, which Dutch tax law requires us to keep for seven years).
Information that stays on your own device
Your language choice, your cookie choice and the words you add in the games are saved only in your own browser (local storage). They are never sent to us and we cannot see them. Your language is only remembered if you allow “Preferences”.
Printable games
You can download the printable games without giving any personal data.
Cookies and similar storage
Cookies are small files a website stores in your browser. Local storage works in a similar way. We only use what the website needs to work and, with your permission, a preference that remembers your language. We do not use advertising, statistics or tracking cookies.
You can change your choice at any time with the Cookie settings link at the bottom of every page.
| Name | What it does | Type | How long | Set by |
|---|---|---|---|---|
tsbs.consent | Remembers your cookie choice, so we don’t ask on every page | Necessary | 12 months | This website |
shopen-games.lang | Remembers your language on the website and in the games | Preferences (only with your permission) | Until you withdraw permission or clear your browser data | This website |
zikaron-pairs-v1, mah-meshutaf.words, mah-meshutaf.level | The words and settings you add in the games, so they are still there next time | Necessary for the game you use | Until you delete them in the game or clear your browser data | This website (members area) |
CF_Authorization | Keeps you signed in to the members area | Necessary | 24 hours | Cloudflare (members area) |
CF_AppSession, CF_Session, CF_Device, CF_Binding | Protect the sign-in against misuse | Necessary | 4 hours to 30 days | Cloudflare (members area) |
__cf_bm, cf_clearance | Only set when Cloudflare needs to check that a visitor is not a bot | Necessary | 30 minutes, or for the duration of the check | Cloudflare |
When you sign in with Google, Google’s own sign-in pages use Google’s cookies, under Google’s privacy policy.
Who receives your data
We only share data with service providers that help us run the website, under data processing agreements:
- Cloudflare, Inc. for hosting, security and the members sign-in.
- Google for “Sign in with Google” in the members area, and Gmail, which we use for email.
- GitHub stores the website’s code and blog posts. It receives no visitor data.
We never sell your data and never share it with advertisers.
Data outside the European Union
Cloudflare and Google are based in the United States and may process data there. These transfers are protected by the EU-US Data Privacy Framework, under which both companies are certified, and by the European Commission’s standard contractual clauses.
How we protect your data
The website only uses secure connections (HTTPS). The members area opens only after signing in with an invited Google account, and only the website owner can change the website’s settings.
Children
The website is meant for parents and educators. Children play the games together with an adult, who signs in with their own Google account. We do not knowingly collect personal data from children.
Your rights
Under the General Data Protection Regulation (GDPR) you have the right to:
- see the personal data we have about you;
- have it corrected or deleted;
- limit or object to how we use it;
- receive it in a format you can take elsewhere;
- withdraw your permission at any time (for cookies, through Cookie settings). This does not affect what happened before you withdrew it.
To use any of these rights, email dianagoorhuis@gmail.com. We will answer within one month. We do not use automated decision-making or profiling.
If you are not happy with how we handle your data, you can complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens, or to the data protection authority in your own country.
Changes to this policy
We update this policy when the website changes. The date at the top shows when it was last updated.