First Not Last — Privacy Policy

Last updated: 21 October 2026

First Not Last is an online sailing race game. This policy explains what we collect when you play, why, and how to delete it. Contact: russellbolger06@gmail.com.

What we collect

• Account: your email address and password (stored only as a one-way hash).
• Profile: your username and nationality flag. Both are shown to other players.
• Friends and blocks: the players you add as friends, pending friend requests, and the players you block.
• Reports: when you report a player or a race name we keep your report (who reported whom, why, your note, and which race it was in) so we can act on it. We keep reports for as long as we need them to deal with abuse. The player you report is not told who reported them.
• Terms: which version of the Terms of Use you accepted, and when.
• Device: a random ID the game creates when it is first installed, so your account is only open on one device at a time. It is not your phone's advertising ID.
• Game connection data: your IP address and connection statistics while you are connected, used to run races. Server logs are kept for up to 30 days.
• Where you connect from: the IP addresses your account signs in from (up to the 50 most recent) and the approximate country, region and town each one points to. We work this out on our own server from a downloaded database; your address is not sent to anyone else. We use it to see where players are, in aggregate, and to deal with abuse such as ban evasion. It is deleted with your account.

We do not show ads, sell data, or use third-party tracking or analytics.

How we use it

• To sign you in and keep your account secure.
• To show your username and flag in races, lobbies and friend lists.
• To email you a temporary password when you ask for one. We send no other email.

Service providers

Our servers are hosted by netcup GmbH in the EU. Password-reset emails are delivered by our email provider. They process data only to provide these services.

Usernames

To stop impersonation, every username that has been used stays reserved permanently, even after it is changed or the account is deleted. Only the username itself is kept — not your email or anything else.

Deleting your account

In the game, open Account → Delete Account. This permanently deletes your email, password, profile, nationality and friends. It cannot be undone.

Children

The game is rated 18+ and is for people aged 18 and over (see the Terms of Use). We do not knowingly collect data from anyone younger.

Changes

If this policy changes, we will update this page and the date above.