Privacy

We store submitted product URLs or X handles and their public metadata, public X-post verification information, payment and order references, payment amounts and timestamps, ranking values, listing and monthly sponsor status, subscription and customer references, and aggregate click totals. Historical records from the former Friends board remain stored as needed to preserve migrated value and correctly process refunds or disputes. To limit submission abuse, LastSpot stores a daily rotating pseudonymous request key rather than a raw IP address. LastSpot does not set analytics cookies or build long-lived visitor profiles.

When a free listing is verified through X, LastSpot stores its public page metadata (such as name, description, hostname, link, and icon) along with the public X post URL used as verification proof. LastSpot checks that post through X's public embed service before publishing the free listing. Paid listings can publish after payment without an X post.

We use DataFast in cookieless mode to measure aggregate traffic. DataFast may process request data such as IP address and browser user agent to create a pseudonymous identifier whose salt rotates about every 24 hours. It may use session-only browser storage, but not long-lived analytics cookies. LastSpot receives aggregate counts rather than raw IP addresses or individual visitor profiles.

Payments and monthly subscriptions are processed by Stripe. Stripe collects the customer, payment, device, fraud-prevention, and required billing information needed to process charges, renewals, cancellations, receipts, refunds, or dispute notices. LastSpot receives payment, checkout, customer, and subscription identifiers; status; amount; billing country; and checkout metadata needed to provide or remove a placement. LastSpot does not receive full card numbers.

Clicking a ranked listing or monthly sponsor link passes through a LastSpot redirect so its aggregate click count can increase, then sends you to the submitted product. The destination may receive a LastSpot attribution query parameter and applies its own privacy policy.

LastSpot uses Vercel for hosting, Convex for application data, X for public listing verification, Stripe for payment processing, and DataFast for cookieless traffic analytics. Data may be processed where those providers operate. Stripe acts as payment processor; LastSpot remains the seller of the sponsored placement.

Public listing information can remain visible while a placement exists. Aggregate click totals and payment references are retained as needed for analytics, accounting, fraud prevention, refunds, disputes, and enforcing placement rules. You can avoid payment processing by not purchasing ranking value or a monthly sponsor link.