Privacy policy

Who is responsible for your data?

FMC COM, a French simplified joint-stock company with its registered office in Bastia, Corsica, publishes Last Man on the Door and is the controller for the processing described here. For any question, contact contact@lastmanonthedoor.com.

Account and sign-in

You can play as a guest without an account. An account lets you keep your career, appear on the online leaderboard and manage friends. We store your email address, editable display name, permanent friend ID, chosen language, account creation and update dates, and information needed for authentication. Passwords for email accounts are stored as a hash, not in plain text.

If you choose Google sign-in, Google provides your account identifier and the profile information you authorise, including your email address, its verification status, your name and, where applicable, your profile picture. We do not receive your Google password. Google sign-in is optional.

Sessions include a technical identifier, an expiry date, your IP address and browser information. This data enables sign-in and helps protect the service against abuse. An email address is required to create an account and receive confirmation or recovery messages; it is not shown to other players.

Games, friends and visible information

We store account-linked results: mode, game type, dates, duration, wins, eliminations and experience. The public leaderboard and result links show your display name and the relevant statistics. Only server-validated online results count towards the online leaderboard. Your account also stores Crowns and Hope, daily challenge progress, acquired skins and equipped skins. Equipped skins are visible to other players and provide no gameplay advantage.

The friends feature stores requests, accepted friendships, blocks, group invitations and recent presence. Your friends see your display name, friend ID and online or offline status. Players in your game or group see the information needed to play, including your display name and character.

Council messages in Traitor Aboard are sent to the authorised participants and held in memory during the council. The game does not save them in a chat archive. An abuse report separately stores the available identifiers, reported display name, group or game, reason, submitted comment, date and review status. Please avoid including unnecessary personal information.

Team voice chat

Voice chat is optional and requires microphone permission in your browser. It is limited to members of your eligible Battle Royale team. You can disable voice chat, mute your microphone or a teammate, and choose open microphone or push-to-talk.

Audio streams are encrypted in transit and travel directly between browsers or through the server’s technical relay. A direct connection can make your network address technically accessible to connected teammates. Last Man on the Door does not record voice conversations. The relay carries the streams without making audio recordings; abuse reports do not include voice recordings.

Cookies and local preferences

The game uses cookies needed for sign-in and security. A session lasts up to 30 days and may be renewed while you use your account. You can sign out or clear cookies in your browser; some account features will then require you to sign in again. A functional cookie also remembers your language choice for one year.

Browser storage remembers settings such as language, display name, character, audio and graphics preferences, sensitivity, tutorial completion, guest career and results awaiting synchronisation. This data remains until replaced or until you clear the site’s browser data. The game does not include advertising trackers or advertising audience measurement.

Why we process this data

Providing the game, account, results and friends features is based on performing the service you request. Security, abuse prevention and report review serve FMC COM’s legitimate interest in protecting the game and its players. Microphone activation is based on your choice and permission, which you can withdraw at any time. Disabling voice chat does not prevent you from playing.

Recipients and service providers

Authorised FMC COM personnel access the data needed to operate the game, provide support and review reports. OVHcloud hosts the game server and account database. Information visible to other players is described above.

Resend delivers account emails and receives the recipient address and message content, including the confirmation or recovery link. Resend states that it processes this data in the United States and uses the Standard Contractual Clauses included in its processing agreement for these transfers: https://resend.com/legal/dpa. Its technical policy is available at https://resend.com/security/gdpr.

When you use Google, its own policies apply to its sign-in service and international transfers: https://policies.google.com/privacy?hl=en. You can use email sign-in instead. Contact us for information about the safeguards applicable to our service providers.

Retention and deletion

Your account, career, permanent currencies, challenges, skins and friend relationships are kept while the account exists. Deleting your account from your profile removes this data from the active database, together with its sessions and linked sign-in accounts. The deleted display name and results are then no longer served by the leaderboard or the service’s public result links.

Group invitations expire after two minutes. Account confirmation and password recovery links expire after one hour. Expiry makes a token unusable; it does not necessarily mean that every related technical record is erased at that moment.

Abuse reports are separate from the account and are not automatically deleted with it. They remain recorded for review by the operator; you can request access or erasure using the contact below. Moderation needs and applicable obligations are considered when responding to that request. Backups and technical logs are not public profiles and are handled separately from active data.

Your rights

You can change your display name, manage friends and delete your account from the game menus. You can choose the language in Settings. To access or correct your data, request erasure or portability, restrict processing or object where that right applies, email contact@lastmanonthedoor.com. A proportionate identity check may be needed to protect your account.

You may also complain to the French data protection authority, CNIL: https://www.cnil.fr/fr/plaintes. Clearing the site’s browser data removes preferences and guest career from that device; it does not by itself delete an account held on the server.