Privacy Policy

I run Lastpile as a personal side project. This page explains what data it uses and why. I’m the data controller; my details are on the Impressum page. You can reach me at support@lastpile.com. See also the Terms.

What’s stored

  • Account details: your email and account ID from Google Sign-In.
  • Saved links: URLs, titles, descriptions, summaries, preview images, and page metadata. CSV imports are read in memory; the uploaded file isn’t kept.
  • Technical logs: IP addresses, errors, and request times used to keep the app running and secure.
  • Account activity: logins, link actions, original opens, imports, and summary-style changes, for basic usage reporting. These records are deleted with your account. Anonymous signup, deletion, and daily usage counts are kept separately, cannot be linked to you, and remain after account deletion.
  • On your device: your session token, theme, install state, Explore preference, offline save queue, and other app preferences.

How it’s used

Saved URLs and page text are used to create your summary feed. I don’t sell your data, including your email, or use your links for advertising or model training. The only emails are service messages, such as the welcome email. There’s no newsletter or advertising.

Legal basis

Account details, saved links, session data, and service emails are processed to provide the app you request. Security logs, abuse checks, rate limits, backups, and reliability data are processed on the basis of a legitimate interest in keeping it safe and available.

Services Lastpile uses

These providers help run the app and may process your email, IP address, saved URLs, or page content:

  • Fly.io: hosts the backend.
  • Supabase: stores account details and saved links.
  • Amazon Web Services SES: sends the welcome email.
  • Netlify: serves the web app and keeps request logs.
  • Google Sign-In: signs you in and provides your account email.
  • Jina AI: extracts text from public pages. Lastpile doesn’t fetch private account pages; paywalled or login-only pages may only return metadata. I expect it to respect site restrictions, including robots.txt.
  • OpenRouter: sends page text to an AI model for summarization.

Some providers process data abroad, including in the United States. These transfers are covered by the providers’ standard contractual clauses and data-processing agreements.

Storage and security

Hosting providers store account data and links. Connections are encrypted, with provider-managed encryption at rest where available. Access is limited to running the app.

How long data stays

Account data stays while your account is active. Unarchived links expire after the period chosen in Settings (90 days by default). They then move to the expiring list in Archive for a 30-day grace period before permanent deletion. Archived links aren’t auto-deleted.

Deleting a link removes it from your account immediately. Deleting your account removes it and its data from live systems. Logs and backup copies remain only as long as needed for security, debugging, recovery, and backup rotation.

Your choices and rights

You can manage your links, export your account data, or delete your account in Settings. Email me to request corrections, restrict processing, or object to it. In the EU/UK, you can also complain to your local data protection authority.

Cookies and device storage

There are no advertising cookies or third-party analytics tools. Lastpile keeps the account activity described above and uses local storage for app preferences, your session, and offline saves. Google Sign-In may use its own storage and browser checks.

Automatic processing

AI generates summaries and Google verifies sign-ins. Lastpile doesn’t make automated decisions with legal or similarly significant effects on you.

Age requirement

Lastpile is for people aged 16 or older and isn’t directed at children. I don’t knowingly collect data from anyone under 16. If you think a minor has provided personal data, email me and I’ll delete the account and its data.

Changes

This policy may change as the app changes. I’ll let you know about material changes in the app or by email.