Privacy Policy

Last updated: August 2026

This Privacy Policy explains what personal data OneLastPull collects, why, and what rights you have over it. It's written to comply with the EU General Data Protection Regulation (GDPR) and applicable Italian law, since OneLastPull is operated from Italy.

1. Who Is Responsible for Your Data

OneLastPull is operated by an independent individual based in Italy (the "data controller"). For any privacy request, reach out through our Contact Us page.

2. What We Collect

OneLastPull collects as little personal data as it can get away with:

If you sign in (via Discord or Google, through our authentication provider Clerk): your name, email address, and profile picture as shared by that provider, plus a unique account identifier.
If you don't sign in: browsing the public parts of the site (game data, images) doesn't require an account and doesn't create a OneLastPull profile for you. Our hosting provider (Cloudflare) processes standard technical data for every visitor — IP address, browser type, request logs — for security and reliability purposes, as is standard for any website.
If you use future community features (comments, tier lists, etc., once available): whatever content you choose to submit.
If you accept our cookie banner: aggregated usage statistics (pages viewed, approximate location, device type) via Google Analytics, so we know what to improve. Nothing here is collected unless you click "Accept" — see Section 5.

We do not sell personal data to third parties, and we run no advertising on the site today.

3. Why We Process It, and On What Legal Basis

Providing the Service (creating your account, remembering you're signed in) — necessary to perform our contract with you (our Terms of Service).
Security and abuse prevention (e.g. rate-limiting, fraud detection) — our legitimate interest in keeping the Service available and safe.
Community features (displaying your comments or contributions) — necessary to perform our contract with you, since that's the feature you're using.
Analytics (understanding how the site is used) — only with your consent, given through the cookie banner. You can decline, and nothing changes about how the Service works for you.

4. Who Else Processes Your Data

We rely on a small number of infrastructure providers, each acting as a data processor on our behalf:

Cloudflare, Inc. — hosting, content delivery, database, and file storage. See Cloudflare's Privacy Policy.
Clerk, Inc. — authentication and session management. See Clerk's Privacy Policy.
Discord Inc. / Google LLC (sign-in) — only if you choose to sign in with them; they process your sign-in according to their own privacy policies, and only share your name, email, and avatar with us.
Google LLC (Analytics) — only if you accept the cookie banner. See Google's Privacy Policy.

Some of these providers are based in the United States. Where that's the case, data transfers rely on the safeguards those providers put in place (such as Standard Contractual Clauses) to meet EU data protection standards.

5. Cookies

OneLastPull uses two kinds of cookies:

Strictly necessary — a session cookie set by Clerk to keep you signed in, and cookies Cloudflare uses for basic security checks. These don't require consent under EU cookie law because the Service can't function without them.
Analytics (optional) — Google Analytics cookies, set only if you click "Accept" on the cookie banner shown on your first visit. We use Google Consent Mode, so nothing analytics-related is sent to Google until you consent, and you can change your mind at any time by clearing your browser's site data for onelastpull.com (which re-shows the banner).

We run no advertising cookies today. If that changes, this policy and the cookie banner will be updated to ask for separate consent before any advertising cookie is set.

6. How Long We Keep It

Account data is kept for as long as your account exists. If you delete your account (or ask us to, via Contact Us), we delete the associated personal data within a reasonable time, except where we're legally required to retain it longer.

7. Your Rights

Under the GDPR, you have the right to:

Access the personal data we hold about you;
Correct inaccurate data;
Request deletion of your data;
Object to or restrict certain processing;
Receive your data in a portable format;
Lodge a complaint with your national data protection authority — in Italy, the Garante per la protezione dei dati personali.

To exercise any of these rights, contact us via the Contact Us page.

8. Children

OneLastPull is not directed at children under 16. If you believe a child has provided us with personal data, contact us and we'll remove it.

9. Changes to This Policy

We may update this policy as the Service evolves. The "Last updated" date above reflects the most recent revision.