Privacy Policy

Information we collect

• Account information. Your email address, display name if provided, account status and sign-in information. Supabase handles authentication, including passwords and sessions.
• Terms acceptance. We store the version of the Terms and Conditions you accept and the time of acceptance, linked to your account. This record helps us manage access to SafeSteps and is separate from optional analytics consent.
• Learning records. The courses you complete, assessment attempts, answers you submit, results and related activity dates. These records are linked to your account.
• Support and administration. Account administration and audit records help the team manage access and maintain the service. If you have contributed discussion posts or reports, those contributions and moderation records may also be stored.
• Optional analytics. If you allow analytics, Microsoft Clarity processes page interactions and ordinary browser, device, network and session information.

How we use information

We use account information to sign you in and control access to SafeSteps. Learning records let us save your progress, assess your submitted answers and show where you can continue across devices. Administration records support account management, moderation and the operation of the service.

When you choose to allow analytics, interaction information helps us understand where people have difficulty using the site. Learning does not depend on analytics being available.

Services that process information

SafeSteps uses these services to deliver the platform:

• Supabase provides authentication and stores account and application data in PostgreSQL.
• OpenAI Sites and Cloudflare provide website hosting and delivery, which involves handling website requests.
• Google handles the Google sign-in flow if you choose it. Account information returned by Google is used through Supabase to establish your SafeSteps account and session.
• Microsoft Clarity provides the optional analytics described below, when enabled and with your consent.

These providers also have their own privacy practices.

Cookies and browser storage

Authentication uses cookies to maintain your sign-in session. Your analytics choice is saved in your browser's local storage. It applies to that browser and device, rather than every device connected to your account.

If you allow analytics, Clarity can use analytics cookies. Blocking or clearing authentication storage can sign you out. Clearing your saved analytics choice means you may be asked again; it does not grant consent automatically.

Optional analytics

Our cookie banner lets you choose Accept analytics, Reject analytics, or Customize. Cookie settings shows essential cookies as always active and lets you turn optional Microsoft Clarity analytics on or off before saving your choice. We ask before loading Microsoft Clarity. Declining does not prevent you from using SafeSteps. We do not use this integration to show advertising, and advertising storage is not granted.

Clarity can record clicks, taps, scrolling and page interactions on eligible pages. Recording is restricted to the home page and the main learning entry page. Sign-in, administration, this privacy page, and learning views with query parameters are excluded. Sensitive account, learning, assessment and discussion regions are marked for masking. Masking does not make all recorded information anonymous: browser, network, session and page information may still be processed.

To change your saved choice, use Cookie settings at the bottom of any page. Turn Microsoft Clarity analytics off and choose Save choices to withdraw consent. If recording was active, withdrawal reloads the page to stop it and clears Clarity's first-party cookies. It does not delete recordings already collected. You may need to make the same choice in other browsers or on other devices.

External learning media

Some learning content includes images, videos or captions hosted by external providers. Loading that content sends a request to its host, which can receive network and browser information. The provider's privacy practices apply to those requests.

Protecting your information

SafeSteps checks identity and account status on the server before allowing protected operations. Learning records are tied to the learner's account, and administrative access is restricted by role. These controls help protect your information, but no online service can guarantee complete security.

Your choices and questions

You can decline optional analytics, change that choice later and choose whether to use Google sign-in. You can review your learning progress in your account. Signing out ends your current session; it does not remove your saved learning records.

For questions about privacy or requests concerning your account information, please contact the SafeSteps team.

Changes to this policy

We may update this page as SafeSteps changes. The date above shows when this policy was last updated.