Privacy Policy
Data controller
Last Gambit is developed and operated by an independent team. For any question or request about this policy or your data, use the contact form on the support page (last-gambit.com/support).
Data we collect
Account data: username, password (stored in encrypted form) and, if provided, an email address. The email is optional and is used only for account recovery and support.
Game data: matches played, results, ratings, leaderboard positions and the players you follow or add as friends.
Technical data: session tokens needed to keep you signed in, the language preference saved in the local storage of your browser or device, and server logs (including IP addresses) kept for security and troubleshooting.
Visit statistics: page visited, referring site, country, browser and device type, collected in aggregate on our own servers. No cookies, no persistent identifiers, no tracking across other sites; IP addresses are hashed and never stored in clear.
Connection fingerprint: a non reversible code derived from the IP address, kept for seven days, used only to warn someone who is about to create a second account without realising it. We do not store the address itself, and the fingerprint expires on its own.
Anonymous play stats: if you play without an account, the game sends a periodic ping with a random installation code generated on the device, the seconds played, the story chapter reached, the platform and the game version. It tells us how many people play without signing up, who would otherwise count as zero in every total. It carries no name, no email address and no Steam id, and it is not linked to any account or person. You can switch it off at any time in the game settings.
Profile photo: if you sign in with Steam or Google, we copy the profile picture of that account onto our servers and show it as your avatar, instead of asking the provider for it every time it is drawn. It is refreshed periodically, it is kept while your account exists and that identity stays linked, and it is deleted when you delete the account or unlink the identity. You can always pick one of our preset avatars instead.
Why we process it
The data is used to provide the game: creating and authenticating accounts, running matches, computing ratings and leaderboards, showing profiles, and preventing abuse and fraud. No profiling, no automated decision-making.
Third parties
The app and the website communicate only with Last Gambit servers. Visit statistics run on our own infrastructure (a self-hosted Umami instance): no third-party analytics, no advertising networks, no sale or sharing of data with third parties. Data is disclosed only if required by law.
Data retention
Data is kept for as long as the account exists. Server logs are kept for a limited period and then deleted or anonymized.
Account deletion
You can delete your account at any time from the app settings; this removes your account data. You can also request deletion through the form on the support page (last-gambit.com/support).
Your rights
Under the GDPR and similar laws you can request access to your data, rectification, erasure, restriction of processing and portability. Send the request through the form on the support page (last-gambit.com/support); requests are answered within 30 days.
Children
Last Gambit is not directed at children under 13 and does not knowingly collect their data. If you believe a child has created an account, report it through the form on the support page (last-gambit.com/support) and it will be removed.
Changes to this policy
This policy may be updated over time. Changes are published on this page with a new last-updated date.