Privacy policy

QA Steps (qasteps.com) is run by Individual Entrepreneur Artsiom Rusau ("the operator"), registered in Georgia under ID 304641840, address: Georgia, City Tbilisi, Krtsanisi District, Settlement Ponichala 3, Building N5, Entrance 2, Floor 4. The operator is the controller of the personal data described here. QA Steps is one person's project: there is no team behind it, and nobody else has access to your data.

Contact for anything in this policy: hello@qasteps.com.

QA Steps has not opened yet. Right now qasteps.com only describes the courses, shows planned prices and lets you join a waitlist. There are no accounts and no payments.

Before the platform opens, a new policy will be published that covers accounts, learning progress and payments. This policy covers only the site as it is now.

If you join the waitlist, the site stores:

– your email address;

– the date and time you joined;

– which form on the site you used;

– the version of the consent text you agreed to;

– once the launch email is sent, the date it was sent, so that it is never sent to you twice.

Your IP address and any other details are not stored with your email.

What it is used for: one email when QA Steps opens. Nothing before that, no newsletter, and no other emails based on this consent.

Legal basis: your consent (Article 6(1)(a) of the GDPR and the UK GDPR). You can withdraw it at any time, see section 9.

Like any website, the web server records each request: your IP address, your browser's user agent string, the address of the page requested and the time.

These logs are used only to keep the site secure and working: to spot attacks and abuse and to fix errors. They are deleted automatically after 14 days.

To limit abuse of the waitlist form, the application may also keep your IP address in memory for up to one hour. It is not written to disk or stored with your email.

Legal basis: the operator's legitimate interest in running a secure website (Article 6(1)(f)).

The site uses no analytics, no visit counting, no advertising or tracking cookies, and no cookies from other companies. Its cookies only remember display settings:

– tz: your time zone, so dates show correctly (1 year);

– sysdark: whether your device uses dark mode, so the page opens in the right colors (1 year);

– theme and rail: only if you change the color theme or the menu width yourself (1 year); the theme is also kept in your browser's local storage;

You can delete all of these in your browser settings. The site works without them.

Personal data is not sold or shared for advertising. The only other companies involved are:

– HostHatch, the hosting provider. The site, the database with the waitlist and the server logs are on a HostHatch server in Amsterdam, the Netherlands.

– Uploadcare, which stores the site's images and delivers them through its content delivery network (Fastly). When your browser loads an image, these services receive your IP address and browser details, as with any request on the internet. Nothing else is sent to them.

– Amazon Web Services (Amazon Simple Email Service), only when the launch email is sent: it receives your email address and the text of that email. The email has no open or click tracking.

Data is disclosed to authorities only where the law requires it.

The operator is based in Georgia, outside the EU and the UK. Your data is stored in the Netherlands and accessed by the operator from Georgia.

Images may be delivered from servers outside the EU and the UK, including the United States, depending on where you are. Only the request itself (IP address and browser details) is involved.

– Waitlist: until the launch email is sent, then for up to 12 months as a record of your consent. If you leave the waitlist earlier, your entry is deleted then.

– Server logs: 14 days.

– Emails you send to hello@qasteps.com: 12 months after the last message in the conversation.

Use the unsubscribe link in the launch email, or write to hello@qasteps.com from the address you signed up with. Your entry is deleted within 30 days at the latest, usually much sooner. Withdrawing consent does not affect what happened before.

You have the right to:

– get a copy of the data held about you;

– have it corrected or deleted;

– restrict its use, or object to processing based on legitimate interest;

– receive the data you provided in a common format;

– withdraw your consent at any time.

Write to hello@qasteps.com. You get an answer within one month. You may be asked to confirm the request from the email address it concerns.

You can also complain to a data protection authority: in the EU or EEA, the one in the country where you live or work; in the UK, the Information Commissioner's Office (ICO); in Georgia, the Personal Data Protection Service. Writing to the operator first is often the fastest way to fix a problem.

The site is served only over an encrypted connection (HTTPS). Only the operator has access to the server, the database and the logs.

The site is not intended for children under 16. Please do not join the waitlist if you are under 16. If it turns out that someone under 16 has joined, the entry is deleted.

A changed policy is published on this page with a new effective date. Waitlist emails will not be used for any other purpose without asking you first.

Effective date: October 20, 2026.