Steady Station logoSteady Station

Privacy Policy

Last updated: March 22, 2026

This Privacy Policy describes how SteadyStation ("we," "us," or "our") collects, uses, and shares your personal information when you use our website and productivity application (the "Service"), hosted at steadystation.com.

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Information You Provide

  • Account information. When you create an account, we collect your name, email address, and profile information provided through Google authentication.
  • User content. Any data, text, or files you create or upload while using the Service.
  • Communications. If you contact us directly, we may collect your name, email address, and the contents of your message.

Information Collected Automatically

  • Usage data. We collect information about how you interact with the Service, including pages visited, features used, timestamps, and referring URLs. This data is collected through Google Analytics.
  • Device and browser information. We collect your IP address, browser type and version, operating system, device type, and screen resolution.
  • Cookies and similar technologies. We use cookies and similar tracking technologies to operate and improve the Service. For details, see our Cookie Policy.

Information from Third Parties

  • Google authentication. When you sign in with Google, we receive your name, email address, and profile picture from Google, in accordance with your Google account settings.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Create and manage your account
  • Authenticate your identity when you sign in
  • Analyze usage patterns and trends to improve user experience (via Google Analytics)
  • Respond to your requests, comments, or questions
  • Send you technical notices, updates, and administrative messages
  • Detect, prevent, and address technical issues, fraud, or security concerns
  • Comply with legal obligations

3. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

  • Performance of a contract. To provide the Service you have requested and manage your account.
  • Legitimate interests. To improve and secure the Service, analyze usage, and communicate with you, where those interests are not overridden by your rights.
  • Consent. Where you have given consent for specific processing, such as non-essential cookies. You may withdraw consent at any time through our cookie consent manager (CookieYes).
  • Legal obligation. To comply with applicable laws and regulations.

4. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of recipients:

  • Service providers. Third-party companies that help us operate and improve the Service, including:
    • Vercel - hosting and infrastructure
    • Neon - database services and authentication storage
    • Google - authentication (Google Auth), analytics (Google Analytics), and tag management (Google Tag Manager)
    • CookieYes - cookie consent management
  • Legal requirements. We may disclose your information if required by law, regulation, legal process, or governmental request.
  • Business transfers. In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
  • With your consent. We may share information for other purposes with your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, accounting, or compliance purposes.

Analytics data collected through Google Analytics is retained in accordance with our Google Analytics data retention settings.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit (TLS/SSL), secure database hosting through Neon, and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our service providers (Vercel, Google, Neon) operate. When we transfer data outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or the service provider's compliance frameworks.

8. Your Rights Under GDPR

If you are in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:

  • Access - request a copy of the personal data we hold about you
  • Rectification - request correction of inaccurate or incomplete data
  • Erasure - request deletion of your personal data
  • Restriction - request that we restrict processing of your data
  • Data portability - request a copy of your data in a structured, machine-readable format
  • Objection - object to processing based on legitimate interests
  • Withdraw consent - withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at the email address listed below. We will respond within 30 days.

9. Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

  • Right to know - request information about the categories and specific pieces of personal information we have collected about you
  • Right to delete - request deletion of personal information we have collected from you
  • Right to opt-out of sale - we do not sell your personal information
  • Right to non-discrimination - we will not discriminate against you for exercising your CCPA rights

To exercise your rights, contact us at the email address listed below. We will verify your identity before processing your request.

10. Children's Privacy

The Service is a productivity application and is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

SteadyStation Contact Us