Privacy policy

The short version

• The only personal information we ask for is what you type into the contact form: your name, your email address, the topic you pick and, if you write one, your brief. The form also sends the address of the page you sent it from. Like any website, our host also receives basic technical details, such as your IP address.
• It goes to our company inbox so we can reply to you. We do not sell it.
• No cookies, no analytics and no advertising trackers.
• Three service providers handle it for us: Vercel, which hosts the website; Resend, which delivers the form to our inbox as an email; and the provider that hosts our company email inbox.
• Email admin@step2play.com to see, correct or delete what we hold about you.

Who we are

This website, www.step2play.com, is run by Step2Play Technologies Private Limited (“Step2Play”, “we”, “us”), a software development company based in India.

We decide why and how the information described on this page is used, so we are responsible for it. In the language of India's data protection law, that makes us the “data fiduciary”.

What we collect

When you send the contact form

• Your name — required, so we know who we are talking to.
• Your email address — required, so we can reply.
• The topic you choose from the list, such as “Web or mobile application”.
• Your brief, if you write one. It is optional.
• The page you sent it from, for example /services/web-development/. Only that one page address is sent, not your browsing history. It tells us what you were reading without needing any tracking tools.

When the form arrives, our server also reads your IP address (the internet address your device connects from). It is used only to protect the form from spam, as explained below, and it is not included in the email we receive.

The form also contains a hidden field that people never see. Automated spam tools tend to fill it in. When that happens, the submission is thrown away and never reaches us.

When you email us directly

We receive your email address and whatever you choose to include, and we handle it in the same way as an enquiry sent through the form.

What we do not collect

There are no accounts, logins or payments on this website. It does not ask for your location, camera or microphone, and its security settings block them. Please do not send passwords, bank or card details, government ID numbers or health information through the form or by email. We do not need them to reply.

How we use it

• To read your enquiry and reply to it.
• To continue the conversation you started, for example to arrange a call or send you something you asked for.
• To protect the form from abuse. Our server notes the IP address each message comes from and, on each running copy of the server, turns away more than five from the same address in an hour. These notes are held only in the server's temporary memory. They are not written to a database or a file, and they are lost when that copy of the server shuts down or restarts.

We use your details because you chose to send them to us for a clear purpose: getting a reply. Using the form will not add you to a mailing list. If you would like us to stop using your information, tell us and we will (see Your choices and rights).

If your enquiry turns into a project, the information we share and handle during that work is covered by the written agreement we make with you. This policy covers only this website and the enquiries sent through it.

Who else handles it

We do not sell your information, and we do not share it with anyone for their own marketing. Three service providers handle it on our behalf, only to run this website, deliver your message and keep it in our inbox:

• Vercel hosts the website and runs the small piece of server code that receives the form. Like any web host, Vercel receives the technical details every browser sends when it loads a page, such as your IP address, the page requested and your browser type. It may keep these in its logs for a limited period to run and secure its service.
• Resend delivers the email our server builds from your form to our inbox. It receives the details in your enquiry, and may keep a copy of the email and a record of its delivery for a limited period so that delivery problems can be traced.
• Our business email provider hosts the company inbox where your enquiry is kept once it arrives.

These providers operate internationally, so your information is processed, and may be stored, outside India, including in the United States. Each has its own privacy terms. We use them to provide a service to us, and we do not give them your information for any other purpose.

We may also disclose information where the law requires it, for example in response to a valid request from a court or a government authority.

How long we keep it

• Your enquiry stays in our company inbox for as long as we reasonably need it: to reply, to continue the conversation, and, if it becomes a project, to keep a record of how the work began. We aim to delete enquiries once they are no longer needed, and you can ask us to delete yours sooner at any time.
• Our server logs note that a message was sent and the reference number Resend gives it. Our code does not write your name, your email address or your message to them. If a send fails, the log keeps the technical error, including any error message Resend returns, so we can fix it. Vercel keeps these logs only for a short period set by our hosting plan.
• Spam-protection counts (your IP address and the times you sent the form) exist only in server memory, as described above.
• Copies held by Vercel and Resend are kept for limited periods under their own settings.

Cookies and browser storage

This website does not set any cookies, and it does not use analytics, advertising or tracking tools. Its fonts, code and graphics are all served from our own domain, so loading a page does not send a request to any third-party font service, ad network or analytics provider. A strict security policy stops the page contacting any other website in the background.

There is one small exception, on the homepage. The homepage, which opens with a 3D introduction, saves a single entry named s2p-seen with the value 1 in your browser's session storage. It remembers that you have already seen the opening loading animation in this tab, so the animation is shorter if you come back to the homepage.

• It is not a cookie, and it is never sent to us or anyone else.
• It contains nothing about you — just the number 1.
• Your browser normally deletes it when you close the tab.

If your browser blocks this kind of storage, nothing breaks. The loading animation simply plays in full each time.

Links to other websites

Some pages link to other websites, such as a client's live site linked from a case study. Once you follow one of those links, that website's own privacy policy applies. Our site is set up so that the other website is not told which of our pages you were reading: links to client sites send no referring address at all, and any other link sends at most our domain name.

Keeping it secure

We take reasonable steps to protect what you send us. The website is served only over an encrypted (HTTPS) connection. A strict security policy lets the page run code only from our own domain, and the form can send only to our own server. Everything the form sends is checked again on the server before it is passed on.

No website or email system is perfectly secure, though, so please keep sensitive details out of your first message.

Your choices and rights

You can ask us to:

• tell you what personal information we hold about you and how we use it;
• correct, complete or update it;
• delete it;
• stop using it, for example if you no longer want a reply.

To do any of these, email admin@step2play.com and say what you would like. Writing from the address you originally used, with “Privacy” in the subject line, helps us find your details quickly. We may ask you to confirm it is really you before we act, so that nobody else can see or change your information. We will reply as promptly as we can, and within any time limit the law sets.

Applicable law may give you further rights, for example to nominate someone to exercise these rights for you if you are unable to.

For questions or complaints about how we handle personal information, write to admin@step2play.com with “Privacy” in the subject line.

If you are unhappy with how we have handled your information, please tell us first and we will try to put it right. If you are still not satisfied, you may be able to complain to the Data Protection Board of India.

The law we follow

We are based in India and aim to handle personal information in line with applicable Indian law, including the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023 as its provisions come into force. If you write to us from another country, the law there may give you additional rights. Tell us, and we will help where we can.

Children

This website is meant for businesses and adults. It is not aimed at children, and we do not knowingly collect information from anyone under 18. If you are under 18, please ask a parent or guardian to get in touch for you. If you think a child has sent us their details, email admin@step2play.com and we will delete them.

Changes to this policy

If the way this website handles information changes, for example if we ever add analytics or cookies, we will update this page before the change goes live and change the “Last updated” date at the top. Where the law requires your consent for something new, we will ask for it first.

Contact us

For questions about this policy or about your information, email admin@step2play.com or use our contact page.

Step2Play Technologies Private Limited