Privacy Policy

This Privacy Policy explains what information lastreplaced.com (the "Service"), operated by Shibby Ventures LLC, a Michigan limited liability company ("we," "us"), collects, how we use it, and the choices you have. By using the Service you agree to this policy and our Terms of Service.

1. Information we collect

• Account information: your email address and, if you set one, a password (stored as a salted hash — we never store plaintext passwords).
• Content you add: item names, locations, notes, replacement intervals and dates, and photos you upload.
• Technical data: standard server logs (IP address, browser type, pages requested) and a session cookie required to keep you signed in.

We do not collect payment information (the Service is free), and we do not use third-party advertising or analytics trackers.

2. How we use information

• To operate the Service: store your items, compute due dates, and show your dashboard.
• To send the emails you request: login links, account notices, and per-item reminders you have turned on.
• To secure, debug, and improve the Service.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

3. Service providers

Your data is processed by infrastructure providers acting on our behalf:

• Email delivery (e.g., Mailgun) — to deliver login links and reminders to your address.
• File storage (e.g., Cloudflare R2) — to store photos you upload.
• Hosting — the servers and database that run the Service.

These providers receive only what they need to perform their function and are bound by their own data-processing commitments.

4. Cookies

We use only essential cookies: a session cookie for authentication and a CSRF token for security. There are no advertising or cross-site tracking cookies. An optional theme preference is stored in your browser's local storage.

5. Data retention and deletion

We keep your data while your account is active. If you delete your account, your items, replacement history, and photos are deleted. Residual copies may persist in encrypted backups for a limited period before being purged. You can also delete individual items or photos at any time, which removes them from active storage.

6. Security

Connections to the Service are encrypted with TLS. Passwords are hashed with bcrypt. Access to production systems is restricted. No method of transmission or storage is 100% secure, but we work to protect your information appropriately for the nature of the Service.

7. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information. Most of this you can do directly in the app (Settings, or by editing/deleting items). For anything else, email [email protected] and we will respond within a reasonable time.

9. Changes to this policy

We may update this policy from time to time. Material changes will be indicated by updating the effective date above and, where practical, by additional notice in the app or by email.

10. Contact

Shibby Ventures LLC · [email protected]