Last LineSurvival
Last LineSurvival
This Privacy Policy explains how Stonepaw, LLC ("Stonepaw", "we", "us"), the developer and operator of Last Line: Survival (the "Game"), collects, uses, discloses and protects information about you when you download, play or otherwise interact with the Game on iOS or Android, when you visit lastlinegame.com, and when you contact our support team.
It does not cover the app stores you get the Game from, or third-party services you use separately (for example your Apple, Google or Game Center account itself). Those are governed by their own policies.
For any question about this Policy or the information we hold about you, or to exercise any right described in Section 17, contact us at:
We aim to answer privacy requests within 30 days. If we need longer, we will tell you why and when to expect an answer.
The first time you open the Game, a welcome screen asks you to confirm your year of birth, accept the Terms of Service and acknowledge this Policy by tapping Agree & Continue. Nothing is sent to our analytics or crash-reporting providers before you tap it.
When you tap Agree & Continue:
Some processing does not depend on that setting because the Game cannot run without it, for example saving your camp on our servers, delivering chat messages, validating purchases, and the basic error reports described in Section 4.2.
| Category | Examples | Why |
|---|---|---|
| Profile | Display name, avatar and frame, optional gender and bio, the country flag you show | Identify you to other players |
| Sign-in details | Email address and (optional) password if you bind an e-mail account; the account identifier from Sign in with Apple, Game Center or Google if you bind one (see Section 5) | Let you recover your account on a new device |
| Year of birth | The year you enter on the first-run screen (we do not store a full date of birth) | Age-gate chat, photos and analytics |
| Messages | Messages you post in world, state, alliance and group chat, and direct messages to other players | Deliver chat; moderate it; investigate reports |
| Photos (optional) | A profile picture or chat image you choose to upload, and a record of your consent to photo moderation | Show it to other players; keep the Game safe (Section 4.4) |
| Reports and blocks | Reports you file about other players or content, and players you block | Moderation and safety |
| Support | The emails you send us and anything you attach | Answer your request |
| Category | Examples |
|---|---|
| Account and device identifiers | Your player account ID; a randomly generated device identifier used to sign you in as a guest; a push-notification token if you allow notifications |
| Game data | Your camp, buildings, survivors, resources, inventory, alliance membership, world-map position, battle results, rankings and progression |
| Purchase records | Store transaction IDs and receipts, the items and subscriptions granted, and refund status |
| Device and technical data | Device model, operating system version, app version, language and region setting, and the IP address our servers see when you connect |
| Analytics (13+, unless you switch it off) | Gameplay events such as tutorial steps, screens and features opened, milestones reached and purchase outcomes. We send these to our own servers, where they are stored with your player account ID, and to Google Firebase Analytics |
| Crash and diagnostic data | Crash reports and diagnostics collected by Firebase Crashlytics (13+, unless you switch analytics off), and our own basic error reports (error message, stack trace, app version and platform), which our servers store with your player account ID so we can find and fix bugs |
This data is not anonymous. Analytics events and error reports on our servers are linked to your player account. We do not give Firebase your account ID, name or email address.
We do not collect precise or approximate location from your device's location services, and the Game does not ask for access to your contacts, microphone, camera or location. Your country flag comes from your device's region setting, not from location services. If you share a photo, you pick it with the system photo picker; the Game receives only the photo you pick.
You can upload a profile picture or send an image in chat. Before your first upload, the Game asks your permission. Each photo you upload is sent to our servers and checked by an automated content-moderation service from OpenAI (openai.com/policies/privacy-policy) to detect content that breaks our rules (for example nudity, violence or hate). OpenAI processes the image only to return a moderation result to us. Under its API terms it does not use API data to train its models, and it may keep API inputs for a limited period for abuse monitoring.
Approved photos are stored on our servers and shown to players who can see your profile or the chat where you posted them. Photos that fail moderation are rejected and not stored. If the moderation service is unavailable, the upload is refused rather than accepted unchecked. Other players can report a photo; reported photos may be hidden and reviewed by our team. Replacing your profile picture deletes the previous one, and we keep only your most recent chat images (older ones are deleted automatically). We keep a record of your photo-moderation consent (the date and the version you agreed to).
If you tap Translate on a chat message, the text of that message is sent to DeepL SE (deepl.com/privacy) to translate it into your language. Only the message text and the target language are sent, not your account details.
You do not need to sign in to play. The Game creates a guest account on first launch, tied to a randomly generated device identifier. To keep your progress safe or play on another device, you can bind your account in profile picture → Account → User Center → Bind Account using:
| Option | What we receive and store |
|---|---|
| Your email address (we send a 6-digit verification code to it) and, if you set one, your password. Our servers store passwords only in hashed form. | |
| Sign in with Apple (iOS) | A stable Apple account identifier for this app. The Game does not ask Apple for your name or email address. |
| Game Center (iOS) | Your Game Center player identifiers and a signature from Apple that proves they are yours. |
| Google (Android) | A Google ID token that identifies your Google account. We store the Google account identifier; the token Google issues can include the name and email address on that Google account. |
You can unbind an option in the same place. We use these identifiers only to sign you in and recover your account; we do not receive your Apple, Google or Game Center friends list, contacts or other profile data.
The Game does not use cookies. It does use the mobile identifiers described above: your player account ID, the guest device identifier, a push token, and the installation identifiers our Firebase SDKs create to work.
We do not access the iOS Identifier for Advertisers (IDFA) or the Google Advertising ID. On iOS the Game links the version of Firebase Analytics that contains no advertising-identifier code, and it switches off Firebase's ad-ID, vendor-ID (IDFV) and ad-personalisation signals. The Game does not show an App Tracking Transparency prompt because it does no tracking: we never link your data with data from other companies' apps, websites or offline sources for advertising or ad measurement, and we never share it with data brokers.
This website (lastlinegame.com) is a set of static pages. It sets no cookies and runs no analytics. It is delivered by Cloudflare, which processes standard request data such as your IP address to serve and protect the site.
We do not use your information for advertising, for marketing profiles, or for automated decisions that have legal or similarly significant effects on you.
If you are in the European Economic Area or the United Kingdom, we rely on these legal bases under the GDPR / UK GDPR:
| Purpose | Legal basis |
|---|---|
| Running the Game, accounts, chat delivery, saving progress, delivering purchases | Performance of a contract (our Terms of Service) |
| Analytics and crash reporting (Firebase and our own analytics) | Legitimate interests in understanding and fixing the Game. You can object at any time by switching analytics off in Settings → Legal → Analytics |
| Our own basic error reports | Legitimate interests in keeping the Game stable |
| Automated moderation of photos you upload | Consent (asked before your first upload) and legitimate interests in keeping the Game safe |
| Chat translation you request | Performance of a contract (you asked for the translation) |
| Push notifications | Consent (your device's notification permission) |
| Anti-cheat, anti-fraud, chat moderation, reports, rate limiting | Legitimate interests in keeping the Game fair and safe |
| Age gating and child-safety measures; tax and accounting records | Legal obligation and legitimate interests |
| Responding to lawful requests, defending claims | Legal obligation / legitimate interests |
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We require our service providers to protect the information they process for us at least as well as this Policy does.
| Provider | Used for | Data involved | Policy |
|---|---|---|---|
| Google Firebase Analytics | Gameplay analytics (13+, unless switched off) | Gameplay events, device and app data, Firebase installation ID. Not your account ID, name or email | firebase.google.com |
| Google Firebase Crashlytics | Crash and error reporting (13+, unless switched off) | Crash traces, device state, app version, installation ID | firebase.google.com |
| Google Firebase Cloud Messaging | Delivering push notifications | Push token, notification content | firebase.google.com |
| OpenAI | Automated moderation of photos you upload | The photo | openai.com |
| DeepL SE | Translating chat messages when you tap Translate | The message text | deepl.com |
| Resend | Sending account verification emails | Your email address and the code | resend.com |
| Apple: App Store, StoreKit, Sign in with Apple, Game Center, APNs | Purchases and receipt validation, sign-in, iOS push delivery | Receipts, account identifiers, push token | apple.com |
| Google: Play Billing, Google sign-in | Purchases and receipt validation, sign-in on Android | Receipts, account identifiers | policies.google.com |
| DigitalOcean | Hosting our game servers and databases | Everything we store (Section 4) | digitalocean.com |
| Cloudflare | Serving this website | Website request data | cloudflare.com |
| Unity Technologies | Game engine and in-app purchasing components | As described in Unity's policy | unity.com |
All in-app purchases are processed by the Apple App Store or Google Play. We never receive or store your card number, billing address or any other payment credential.
We receive a receipt or transaction ID, which our servers validate with Apple or Google to grant your items, restore purchases on a new device, handle refunds and stop a receipt being redeemed twice. Subscription status (for example VIP Monthly Pass renewals) is checked with the store the same way.
If you allow notifications, we send reminders about your own game, for example that a build has finished, a shield is about to end or your alliance needs help. Some are scheduled on your device; others are sent from our servers using a push token issued by Apple or Google and delivered through Firebase Cloud Messaging.
Offers & News is off by default. You receive reminders about offers and news only if you turn on Settings → Notifications → Offers & News, and you can turn it off again there at any time. Players under 13, and players whose year of birth has not been confirmed, never receive them, even if the setting is on.
You can switch individual notification categories off in Settings → Notifications, or turn notifications off completely in your device settings. This does not affect anything else about your account.
| Data | Kept for |
|---|---|
| Account, profile, sign-in identifiers and game data | While your account exists. Deleted when you delete your account. |
| Chat messages | Each chat channel keeps only its most recent messages; older messages are overwritten automatically. The messages you posted are removed when you delete your account. |
| Photos you upload | Your current profile picture and your most recent chat images, until you replace them or delete your account. Rejected photos are not stored. A photo that was reported may be kept as evidence for the moderation team after it is deleted from view. |
| Analytics events and error reports on our servers | While your account exists. Deleted when you delete your account. We do not currently delete them earlier. |
| Firebase Analytics and Crashlytics data | Held by Google under the retention settings of our Firebase project and Google's terms. It is not stored under your account ID, so we cannot look it up or delete it account by account. |
| Server logs | Our servers keep short technical logs (which can include your account ID and IP address) in size-capped files that are overwritten automatically. |
| Reports and moderation records | As long as needed to investigate and act on the report and to detect repeat abuse. |
| Purchase and transaction records | While your account exists, and afterwards only the minimum the law requires for refunds, chargebacks, accounting and tax. |
| Support emails | While needed to resolve your request and for a reasonable period afterwards. |
Stonepaw, LLC is based in the United States, and our servers and service providers are in the United States and other countries. If you play from elsewhere, your information is transferred to and processed in those countries, where data protection laws may differ from yours.
Where we transfer personal information out of the EEA or the UK, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision. You can ask us for details at support@lastlinegame.com.
We use reasonable technical and organisational measures to protect information, including encryption in transit (HTTPS/TLS) between the Game and our servers, server-authoritative game state so progress and purchases cannot be altered from a device, hashed passwords, access controls on our infrastructure, and regular backups.
No method of transmission or storage is completely secure. If we become aware of a breach affecting your personal information, we will notify you and any relevant regulator where the law requires it.
The Game is not directed to children under 13. Everyone confirms a year of birth on the first-run screen. If the year you enter makes you under 13:
Some places set a higher age of digital consent, up to 16 in parts of the EEA. Where a higher age applies to you, read 13 above as that higher age.
If you are a parent or guardian and believe your child has given us personal information, contact support@lastlinegame.com and we will delete it and the associated account.
To exercise a right that is not available in the Game, email support@lastlinegame.com. We may need to confirm the account is yours, usually by asking you to write from the email address bound to it or to give your in-game player ID (UID). We will not discriminate against you for exercising any of these rights.
You can delete your account and its data yourself, from inside the Game, while you are online:
DELETE and tap Delete Forever.Deletion happens at once on our servers and is permanent. It removes your account, sign-in identifiers, game data, photos, the chat messages you posted, analytics events and error reports stored under your account, and your push token. If you cannot open the Game, email support@lastlinegame.com and we will delete it for you. Delete your account has the full steps and lists exactly what is deleted and what is kept.
Deleting your account does not cancel a subscription. Cancel it in your App Store or Google Play subscription settings first.
Stonepaw, LLC is the data controller for the processing described in this Policy. Our legal bases are in Section 8 and your rights in Section 17. You can lodge a complaint with your national supervisory authority; the European Data Protection Board lists EEA authorities, and UK users may contact the Information Commissioner's Office.
In the past 12 months we have collected these categories of personal information: identifiers (account and device IDs, email address if bound, IP address); commercial information (purchase records); internet or other electronic network activity (gameplay and analytics events, error reports); characteristics such as age (year of birth) and, if you set it, gender; the contents of messages you send in the Game; and photos you upload. The sources, purposes and recipients are in Sections 4, 7, 9 and 10.
We have not sold personal information, and have not shared it for cross-context behavioural advertising, in the past 12 months. We do not knowingly sell or share the personal information of consumers under 16. California residents have the rights to know, delete and correct, and to non-discrimination. They are described in Section 17 and available to every player, wherever they live.
Residents of states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah and Texas, have rights to access, correct, delete and obtain a copy of their personal information, and to opt out of targeted advertising, sale and profiling. We do not do targeted advertising, sell personal information or profile, so there is nothing to opt out of. You exercise the other rights as described in Section 17, and you can appeal a decision by replying to our response.
We may update this Policy, for example when we add a feature or change a service provider. When we do, we will change the "Last updated" date at the top of this page. If a change is material, we will give you prominent notice, which may include asking you to review it the next time you open the Game.
This Policy is written in English. If we provide a translation and the versions conflict, the English version prevails.