Privacy Policy

1. What We Collect

When you use LastSeen.gg, we collect the following information:

• Account information: your Discord username, display name, avatar, and email address, provided through Discord OAuth when you sign in.
• Gamertags: the gamertags and platform identifiers you add to your profile (e.g. Steam, Xbox, PlayStation, Epic Games, Battle.net).
• Search queries: the gamertags you search for, so we can improve our search results and help more people reconnect.
• Uploaded images: photos and screenshots you upload as memories on your profile.
• Connection and notification data: connection requests you send or receive, and related in-app notifications.
• Usage data: basic analytics like page views, feature usage, and device type collected via Vercel Analytics to improve the product.

2. How We Use Your Data

We use the information we collect to:

• Help you find and reconnect with old gaming friends by matching gamertags across platforms.
• Verify gamertag ownership through third-party platform APIs.
• Moderate uploaded images using Google Cloud Vision API to detect and prevent inappropriate content.
• Send connection requests and in-app notifications between users.
• Improve our search algorithms and overall product experience.

We will never sell your personal data to third parties. We do not use your data for advertising.

3. Third-Party Services

We use the following third-party services:

• Supabase: database, authentication, and file storage (including uploaded images).
• Vercel: hosting and web analytics.
• Discord: OAuth login provider. When you sign in, we receive your Discord username, avatar, and email address.
• Google Cloud Vision API: automated image moderation. Uploaded images are sent to Google for content safety analysis.
• Gaming platform APIs: Steam API, Xbox Live API, PlayStation Network API, Epic Games API, and Battle.net API for gamertag verification and profile data.
• IGDB / Twitch API: game database and cover images.

These providers have their own privacy policies and handle your data according to their own terms.

4. Cookies

We use a small number of cookies, all essential to the service:

• Session cookies: managed by Supabase Auth to keep you logged in.
• ls_last_active_updated: a short-lived cookie (1-hour TTL) used to throttle activity tracking so we only update your last-active timestamp periodically, not on every page load.
• ls_preview: a temporary cookie (60-second TTL) used when you preview your own profile as a visitor would see it.

We do not use tracking cookies, advertising cookies, or any third-party cookie-based analytics.

5. Data Storage

Your data is stored securely using Supabase, our database and authentication provider. Supabase uses encrypted connections and follows industry-standard security practices. Data may be processed in the United States and Europe depending on server availability.

Uploaded images are stored in Supabase Storage. Image URLs are publicly accessible to anyone with the link, as they are displayed on your profile. If you delete an image, it is removed from storage.

6. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• Access: request a copy of all personal data we hold about you.
• Correction: request that we correct any inaccurate data.
• Deletion: request that we delete your account and all associated data.
• Export: request your data in a portable format.
• Objection: object to certain types of data processing.

To exercise any of these rights, email us at support@lastseen.gg. We will respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will remove all your personal data, including gamertags and search history, within 30 days. Anonymized, aggregated data (such as total search counts) may be retained for analytics purposes.

8. Security

We take reasonable measures to protect your data, including encrypted connections (HTTPS/TLS), secure authentication via Supabase Auth, and access controls on our database. However, no system is 100% secure, and we cannot guarantee absolute security.

9. Image Uploads

LastSeen.gg allows you to upload images as memories on your profile. Here is what you should know:

• Uploaded images are stored in Supabase Storage and are publicly accessible via their URL.
• All uploaded images are automatically scanned by Google Cloud Vision API for content safety. Images that violate our content policy may be rejected or removed.
• Free accounts may upload up to 20 images. Pro accounts may upload up to 50 images.
• You are responsible for ensuring you have the right to upload any image you share. Do not upload images containing private information of others without their consent.

10. Children

LastSeen.gg is not intended for users under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we will post a notice on the site. Your continued use of LastSeen.gg after changes are posted means you accept the updated policy.

12. Contact Us

If you have questions about this privacy policy or how we handle your data, reach out to us at support@lastseen.gg.