Privacy Policy
Last updated: 9 August 2026
1. Who we are
Alanas Kalinauskas, an individual trading as "Last Wipe" and "lastwipe.xyz", at Fabijoniškių 3a 54, 07130 Vilnius, Lithuania, is the controller of the personal data described below. Data-protection requests go to hello@lastwipe.xyz.
2. What we collect
- Your email address, when you start checkout or ask for something free.
- Order details - what you bought, the amount, and the country your card was issued in.
- Usage and device data - pages viewed, IP address, browser user agent.
- Advertising identifiers - cookies set by advertising platforms, and a first-party id we store in your browser.
- Your custody record - the recovery alias we issue you, your Family View PIN in encrypted form, the delay you chose, your term dates, and an append-only log of every unlock request and release. We keep this because it is the service: without it we cannot give your PIN back.
- A record that Steam emailed your alias - the sender, the subject line and the time. We do not store the contents of those emails, and we specifically do not store the link Steam sends that would disable Family View.
We never ask for and never hold your Steam password or your Steam login. You set everything up yourself, signed in to your own account, in your own browser. Nothing we run watches whether you played anything.
3. How we use it
To deliver what you bought, to email you about an order you started, and to measure which ads work. For measurement we share a hashed (irreversible) form of your email and billing details, plus your IP address and user agent, with our advertising platform. We do not sell your data.
4. Legal basis
Delivering what you bought, and emailing you the file and the receipt, is performance of a contract. Emailing you about a checkout you started but did not finish, and measuring which advertising produced a sale, are carried out on the basis of legitimate interests, and you can object at any time using the contact below or the unsubscribe link in any email. Where your local law requires consent for advertising cookies or for measurement, that basis applies instead. Which of these applies depends on where you are, and this allocation has not yet been reviewed by a lawyer.
5. Processors
Payments, email delivery, hosting, storage, measurement and internal alerting are handled by third-party providers acting on our instructions: Stripe (payments and checkout), Resend (transactional and follow-up email), Vercel (hosting and file storage), Upstash (order records, download tokens and email suppression lists), Meta (advertising measurement, including the server-side event described in section 3) and Telegram (internal notification of a sale or a failed payment; it receives order metadata, not your payment details). Several of these are outside the EEA and the UK, so an international transfer mechanism is required - confirm which one applies to each before launch.
6. How long we keep it
Order records and download links: 30 days. Checkout leads: 90 days. Unsubscribe and purchase suppression records are kept indefinitely - deleting them would mean emailing you again. Custody records and their audit logs are also kept indefinitely, including after your term ends. A custody record that expired while your Family View was still switched on would leave you locked out of your own library with no way for us to help, so we do not delete them on a timer. If you want yours erased, ask - but collect your PIN first.
7. Your rights
Access, correction, deletion, objection and portability, and the right to complain to your local supervisory authority. Every marketing email carries a one-click unsubscribe. Email hello@lastwipe.xyz, which is monitored.