Privacy Policy
Last updated: August 2026
This Privacy Policy explains how Sista steget processes personal data when you visit our website, create or use an account, use our services, make a purchase, download digital materials, or contact us. We respect your privacy and process personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
1. Data Controller
Sista steget is operated as a sole proprietorship in Sweden and is responsible for the processing of personal data described in this Privacy Policy, unless otherwise stated.
If you have questions about how we process your personal data, you can contact us at sistasteget.se@gmail.com or through the contact form available on the website.
2. Personal Data We Process
The personal data we process depends on how you use Sista steget. This may include, among other things:
- Email address
- First and last name
- Profile picture, if provided through your login provider
- Unique account or user ID
- Information about your user account and access to the service
- Information about purchases, such as the product purchased, payment status, amount, transaction ID, and purchase date
- Information about your use of the service, such as quiz history, results, statistics, and study activity
- Information about downloaded PDF materials, such as the material downloaded, user ID, and download time
- Information you provide when contacting customer support
- Technical information that may be processed when you use the website, such as IP address, browser, device, and technical logs, depending on the functionality you use and the cookies or similar technologies you have accepted
We do not collect or store your Google password. If you sign in using Google, authentication is handled through Google's authentication service.
3. When You Sign In or Create an Account
Some Sista steget features require a user account. You may use Google as a sign-in provider. When you sign in with Google, we may receive the information that Google makes available to the service, such as your name, email address, profile picture, and unique account ID.
- Create and manage your account
- Authenticate you and keep you signed in
- Provide access to features that require an account
- Connect quiz results, purchases, and other relevant activity to your account
We do not use or have access to your Google password.
4. When You Use the Service
When you use Sista steget, we may process information necessary to provide the service's functionality and your personalized experience.
- Save and display quiz history
- Display results, statistics, and analyses
- Provide access to features included in your plan
- Manage access to Premium and Exam Pro
- Maintain the security of the service and prevent misuse
The data processed depends on the features you use and the plan you have.
5. Purchases of Premium and Exam Pro
When you purchase Premium or Exam Pro, we need to process certain personal and purchase-related information necessary to complete the purchase, record the transaction, and provide access to the digital features and materials you have purchased.
- Identify the account associated with the purchase
- Record the product purchased
- Verify payment status
- Activate the appropriate Premium or Exam Pro access
- Handle customer support and purchase-related inquiries
- Handle complaints, legal claims, and other obligations under applicable law
Payment Information
Payments are processed by Stripe. Sista steget does not store complete card details. Stripe may process payment and transaction information to complete the payment and provide its payment services. Stripe processes personal data in accordance with its own terms and privacy policy.
Purchase and Transaction Data
We may retain information necessary to record and manage a purchase, such as the product, amount, payment status, date, transaction ID, and information linking the purchase to your user account.
6. Quiz History, Statistics, and Study Activity
If you use features that save quiz results or study history, we may process information about the exercises you complete, your results, and statistics. This is done to display your history, provide analyses, and provide account-related functionality.
- Completed quizzes and exercises
- Results and the number of correct or incorrect answers
- Quiz history
- Statistics by chapter
- Study-related activity necessary for the service's functionality
This information is associated with your user account and is used to provide the features you use.
7. PDF Materials and Downloads
Exam Pro may provide access to digital PDF materials. When you download a PDF, we may record information about the download, such as the material downloaded, the user account that downloaded it, and the time of the download.
- Provide PDF materials included with Exam Pro
- Verify that the user has the right to access the material
- Maintain service security and prevent unauthorized distribution
- Investigate and resolve technical issues
- Handle questions and support related to digital materials
Download records associated with your account may be retained for as long as necessary to manage access, security, support, or other legitimate purposes.
8. Why We Process Personal Data and Legal Basis
We process personal data only when there is a legal basis under the GDPR. The legal basis depends on the type of processing involved.
Performance of a Contract
We process certain personal data because it is necessary to provide the service under the agreement with you. This may include creating and managing your account, providing purchased features, maintaining quiz history, and delivering digital content.
Legal Obligation
We may need to process certain data to comply with legal obligations, such as accounting and tax requirements.
Legitimate Interests
We may process certain data when necessary for our legitimate interests, such as maintaining security, preventing fraud and misuse, improving the service, resolving technical issues, and establishing, exercising, or defending legal claims.
Consent
Where processing requires your consent, such as certain cookies, analytics, or personalized advertising, we process the data only after obtaining valid consent. You may withdraw your consent at any time.
9. How Long We Keep Personal Data
We retain personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by law.
- Account data is generally retained while your account is active.
- Quiz history and statistics are retained for as long as necessary to provide account-related functionality, or until you request deletion where applicable.
- Purchase and accounting data may need to be retained for the period required under applicable law.
- Information necessary to establish, exercise, or defend legal claims may be retained for as long as necessary for that purpose.
- Download records may be retained for as long as necessary for access management, security, support, or other legitimate purposes.
If you request deletion of your account, we delete or anonymize personal data that we no longer need to process. We may need to retain certain information where required by law or necessary to handle legal claims.
10. Third-Party Services
Sista steget uses third-party service providers to provide the website, authentication, payments, databases, storage, email, analytics, and advertising.
Google may be used as a sign-in provider through OAuth. When you use Google to sign in, Google may process personal data in accordance with its own terms and privacy policy.
Stripe
Stripe is used to process payments for Premium and Exam Pro. Stripe may process payment and transaction data in accordance with its own terms and privacy policy.
Supabase
Supabase is used for authentication, databases, and storage necessary to provide Sista steget's services. The data processed through Supabase depends on the features you use.
Google Analytics
Google Analytics may be used to analyze how the website is used, such as page views, traffic sources, device information, and user behavior. Analytics tools that require consent are only used after the required consent has been obtained through the cookie banner.
Google AdSense
Google AdSense may be used to display advertisements on the website. Depending on your settings and consent, Google and its partners may process information about your use of the website to display advertisements and measure their performance.
For more information about how each provider processes personal data, please refer to the provider's current privacy policy and terms.
11. Cookies and Similar Technologies
Sista steget uses cookies and similar technologies to operate the website, manage authentication and sessions, and provide analytics and advertising when you have given your consent.
Essential Cookies
Essential cookies may be used for authentication, session management, security, and other functionality necessary for the website to operate.
Analytics Cookies
Google Analytics may use analytics cookies to understand how the website is used. These cookies are only used after the required consent has been obtained.
Advertising Cookies
Google AdSense and its partners may use advertising cookies to display, personalize, and measure advertisements. These cookies are only used after the required consent has been obtained.
How to Manage Cookies
You can change your cookie settings at any time through the cookie banner or the settings available on the website. You can also manage or delete cookies through your web browser settings. If you withdraw your consent, some functionality or advertising may be affected.
12. Google Analytics and Advertising
Google Analytics
Google Analytics is used to understand how visitors use the website. Depending on your settings and consent, information such as page views, traffic sources, device information, and user behavior may be processed.
Google AdSense
Google AdSense is used to display advertisements in certain parts of the website. Where the required consent has been provided, Google and its advertising partners may use cookies or similar technologies to display advertisements and measure their performance.
You can manage your Google advertising settings through Google's advertising settings. You can also withdraw or change your consent through the cookie settings on the website.
13. Your Rights Under the GDPR
Depending on the circumstances, you have several rights under the GDPR regarding your personal data.
- Right of access – You can request information about the personal data we process about you and, in certain cases, obtain a copy.
- Right to rectification – You can request correction of inaccurate or incomplete personal data.
- Right to erasure – In certain circumstances, you can request deletion of your personal data.
- Right to restriction of processing – In certain circumstances, you can request that we restrict the processing of your personal data.
- Right to data portability – In certain circumstances, you can receive personal data that you have provided to us in a structured, commonly used, and machine-readable format.
- Right to object – In certain circumstances, you can object to processing based on legitimate interests.
- Right to withdraw consent – Where processing is based on your consent, you may withdraw your consent at any time.
Your rights are not absolute and certain exceptions may apply under the GDPR and other applicable laws. To exercise your rights, contact us at sistasteget.se@gmail.com.
14. Account Deletion
You can request deletion of your user account by contacting us. When your account is deleted, we delete or anonymize personal data that we no longer need to process.
Deleting your account does not necessarily mean that all information relating to a previous purchase can be deleted if we are legally required to retain certain information, such as accounting records.
15. Security
We implement reasonable technical and organizational security measures to protect personal data against unauthorized access, loss, alteration, or other unlawful processing. However, no internet-based service can be guaranteed to be completely secure.
16. International Data Transfers
Some of our service providers may process personal data outside the European Union or European Economic Area (EEA). Where personal data is transferred outside the EU/EEA, we use safeguards required under applicable data protection laws, such as an adequacy decision or Standard Contractual Clauses where appropriate.
17. Children
Sista steget is not specifically directed at children. If we become aware that we have collected personal data from a child in a manner that violates applicable law, we will take reasonable steps to address the situation.
18. Changes to This Privacy Policy
We may update this Privacy Policy when necessary, for example due to changes in the service, legislation, or how we process personal data. When material changes are made, we will update the last-updated date at the top of this page and may also notify you in an appropriate manner when required.
The latest version of this Privacy Policy will always be available on the website.
19. Contact and Complaints
If you have questions about how we process your personal data, wish to exercise your rights, or want to make a complaint, you can contact us.
Email: sistasteget.se@gmail.com
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten – IMY) if you believe that our processing of your personal data violates the GDPR or other applicable data protection laws.
20. Sista steget Is an Independent Service
Sista steget is operated as a sole proprietorship and is an independent private educational service with no official affiliation with Swedish authorities.
Sista steget is operated as a sole proprietorship and is an independent educational service with no official affiliation with Swedish authorities.