Privacy

Data and purposes

The seller above is the data controller. Free play needs no email. Purchases, sign-in and support use your email, order and access records, and a password hash if you set one. Login sessions include IP address and browser information for security. Stripe processes payment details; we do not store card numbers. Withdrawal statements include name, email, contract reference and receipt time.

Legal grounds: contract performance and steps you request (GDPR Art. 6(1)(b)), record-keeping and withdrawal duties (c), and legitimate interests in security and basic statistics to improve the service (f).

Storage and statistics

Necessary cookies maintain login and purchase access for up to 30 days. Language and progress stay in your browser until cleared. There are no advertising cookies. Game statistics contain events, puzzle, language, device category, country and referring domain; they are not linked to an email or account. Event identifiers and hashed rate-limit keys are kept for up to one day; aggregates, mail status and error codes for up to 90 days; health checks for up to 30 days. Expired sessions and tokens are removed during regular cleanup.

Account and purchase rights are kept while needed to provide access. Orders, contracts and withdrawal records are kept for performance and applicable mandatory retention periods, then may be deleted once those duties end. Request deletion at support@lastmile.day.

Providers and your rights

Cloudflare provides hosting, storage and protection; Stripe handles payment; Resend receives recipient addresses and transactional email contents. These providers may process data outside the EEA. Their agreements provide adequacy decisions and/or standard contractual clauses for applicable transfers: Cloudflare DPA, Stripe DPA, Resend DPA. Ask us for a copy of applicable safeguards. Policies: Cloudflare · Stripe · Resend.

You may request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. Contact support@lastmile.day. You may complain to a data protection authority, including where you live. An email is required only for purchases and recovery. We make no legally significant decisions through automated profiling.