Privacy policy

This is a translation provided for convenience. The French version prevails.

Updated on 15 October 2026. Last1.fun collects as little data as possible: only what is needed to log you in, take your payments and give you access to your software. Nothing is sold, and nothing is used for advertising.

1. Data controller

Last1.fun is run by a private individual, pending the creation of their business. For any question about your data: [email protected].

2. Data collected

• Account: when you log in with Discord, the ID, username and display name of your Discord account. We have no access to your Discord email address, your servers or your messages.
• Login: your login sessions on the site and in the software (a random token and its expiry date).
• Orders: the ID of your customer record at Stripe, your subscriptions and purchases (offer, amount, dates, status), and the date on which you consented to immediate access to the software.

No bank details are passed on to us. Stripe, which processes payments, itself collects your email address, your payment method and your billing address, and keeps your invoices. The site does not record your IP address; the host and Cloudflare process it only to route and protect traffic.

3. Purposes and legal bases

• Logging you in, selling and supplying the software, managing subscriptions, purchases and access to the software: performance of the contract.
• Keeping accounting records: legal obligation.
• Preventing fraud and securing the site: legitimate interest.

4. Recipients and processors

• Stripe (Stripe Payments Europe, Ltd., Ireland): payments, invoices, receipts. See Stripe's privacy policy.
• Discord (Discord Inc., United States): logging in with your account. See Discord's privacy policy.
• Hetzner Online GmbH (Germany): hosting of the site and the database.
• Cloudflare, Inc. (United States): delivery of the site and protection against attacks.

Transfers outside the European Union (Discord, Cloudflare, Stripe) are covered by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses.

5. Retention periods

• Account: for as long as it exists; deleted on request.
• Login sessions: until they expire (30 days on the site, 90 days without launching a piece of software) or until you log out.
• Orders and accounting records: 10 years (Article L123-22 of the French Commercial Code).
• Database backups: 7 days.

6. Your rights

You can ask to access your data, have it rectified or erased (within the limits of legal obligations), receive it in a portable format, restrict its processing, or object to its processing, by writing to [email protected]. We reply within one month. You can also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).

7. Cookies

The site only sets cookies that are strictly necessary for it to work, which are exempt from consent: l1_session (your login, 30 days), l1_oauth (for the duration of the Discord login, 10 minutes) and a third cookie, l1_lang (1 year), which remembers the language you chose with the language switch (the “English” / “Français” link). No audience measurement or advertising cookies; fonts are hosted on our own servers. The payment page, hosted by Stripe, uses its own cookies, which are necessary for payment and fraud prevention.

8. Security

The site is only accessible over HTTPS. Login tokens are random and only their fingerprint is kept; what the server hands to the software is signed so that it cannot be forged.

9. Changes

This policy may change, for example when the business is created. The date of the latest update is shown at the top of the page.