Privacy Policy
Last updated: 2026-07-22
1. Overview
This policy explains what personal data The Last Forecast processes when you use http://localhost:3000, on what legal bases, and what rights you have — including your rights under the EU General Data Protection Regulation (GDPR), the UK GDPR, and the ePrivacy Directive.
2. Data we process
- Server logs and security: IP address, user agent, and requested pages are processed by our hosting providers (Vercel, Cloudflare) to deliver the Site and defend it against abuse. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Approximate location (country only): our infrastructure derives your country from your IP address so that we can show the correct privacy controls (for example, the EU consent banner). The country code is not stored beyond the request. Legal basis: legitimate interest / legal obligation.
- Advertising (Google AdSense): if ads are shown, Google may set cookies and process personal data to deliver and measure ads. For visitors in the EU/EEA/UK/Switzerland we do not load any advertising code or cookies unless you click “Accept” in the consent banner. Legal basis: consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via “Privacy settings” in the footer. See how Google uses data from partner sites.
- Subscriptions (Stripe): when the ad-free plan is available, payment details are processed directly by Stripe; we never see your full card number. Legal basis: contract (Art. 6(1)(b) GDPR).
- Preferences: your theme choice (light/dark) is stored only in your browser’s localStorage and your consent choice in a cookie. These are functional and are never sent to advertisers.
3. Cookies and similar technologies
| Name | Purpose | Type / duration |
|---|---|---|
| tlf_consent | Remembers your advertising consent choice | Essential · 12 months |
| tlf-theme (localStorage) | Remembers your light/dark override | Functional · until cleared |
| Google AdSense cookies | Ad delivery and measurement | Advertising · only after consent (EU/EEA/UK/CH) |
| tlf_adfree | Marks an active ad-free subscription | Functional · duration of subscription |
4. International transfers
Our providers (Vercel, Cloudflare, Google, Stripe, Neon) may process data in the United States and other countries under appropriate safeguards such as the EU–US Data Privacy Framework and Standard Contractual Clauses.
5. Retention
Server logs are retained by our providers for short, provider-defined periods. Consent records last 12 months. Subscription records are kept for as long as required by tax and accounting law.
6. Your rights (GDPR / UK GDPR)
You have the right to access, rectify, and erase your personal data; to restrict or object to processing; to data portability; and to withdraw consent at any time without affecting prior processing. You also have the right to lodge a complaint with your local supervisory authority. To exercise any right, contact us at the address published on the Site.
7. Children
The Site is a general-audience news publication and does not knowingly collect personal data from children under 16.
8. Changes
We will post any changes to this policy here and update the date above. Significant changes will be announced on the Site.