Privacy Policy

This policy explains what lastplayed.io collects, why, and the choices you have. It applies to the lastplayed.io website and service.

What we collect

• Account & provider data. When you sign in with a provider (e.g. Plex or Apple Music), we receive an identifier and authorization token from that provider so we can read your listening history. We never receive your provider password.
• Listening data. Tracks, artists, albums, timestamps, play counts (where the provider exposes them), and associated artwork — used to build your profile and summaries.
• Profile settings. Your handle, display name, and appearance preferences.
• Payment data. Payments are processed by our payment provider (Stripe). We receive confirmation and limited billing metadata; we do not store full card numbers.
• Operational data. Basic logs and metrics needed to run, secure, and debug the Service.

How we use it

To operate the Service: authenticate you, ingest and display your listening data, generate shareable preview images, process your one-time publishing payment, secure the Service against abuse, and comply with legal obligations.

What is public

A published profile and its summaries are public by design — that is the point of the Service. Anything you choose to publish can be seen and shared by others. Until you publish, your data is not shown publicly.

Sharing

We do not sell your personal data. We share data only with service providers that help us run the Service (such as our payment processor and hosting/infrastructure providers), and when required by law or to respond to valid legal process. We may preserve and disclose data where legally obligated — for example, reporting apparent CSAM to NCMEC under 18 U.S.C. §2258A, or honoring a law-enforcement preservation request.

Retention

We keep your data while your account is active. When you delete your account we remove your profile and associated data, except where we are required to retain it (for example, payment records, or material we are legally obligated to preserve).

Your choices

You can edit your profile, unpublish, or delete your account at any time from your settings. To request access to or deletion of your data, contact us at [email protected].

Children

The Service is not directed to children under 13, and we do not knowingly collect their data. If you believe a child has provided us data, contact [email protected].

Contact

Privacy questions: [email protected]. Abuse or illegal content: [email protected].