Last updated: September 10, 2026 (version 2026-09-10), written to meet the EU General Data Protection Regulation (GDPR)
ZOFL STUDIOS LLC (“ZOFL,” “we,” “us”) operates playlastworld.com and LASTWORLD (the “Service”) and is the data controller for the personal data described here. Address: 28 Church St, Ste 14 #6315, Winchester, Massachusetts 01890, USA. Contact for anything in this policy: contact@zofl.com.
Your account is stored in the European Union. Online matches are relayed by a game server that may be outside the EU.
Your account, in the EU. Our player database and authentication run in Frankfurt, Germany (EU). That is where your email address, your hashed password, your private identity record, your statistics, your match history and your website sign-up are stored. None of that leaves the EU database.
Your matches, on the nearest game server. We run game servers in the United Kingdom and in Virginia, United States. When you play online, the game measures your connection to each one and your match is placed on whichever is faster for the players in it. That server handles your IP address and connection data for the length of the match, and it stores the match recording so the match can be watched afterwards. It never receives your password or your private identity record.
Our team administers these systems remotely; such access is limited to operating the Service and protected by the safeguards in Section 10.
We collect no more than this. We do not run third-party advertising or tracking, we do not profile you, and we do not sell personal data.
We do not sell or rent personal data, and we share it only with the infrastructure providers that host the Service for us, acting on our instructions:
Beyond that, we disclose personal data only to authorities where required by law, to protect our rights, safety, or property, or to a successor entity in a merger, acquisition, or sale of assets.
If you are in the EU/EEA (and in many other places), you have the right to: access the personal data we hold about you; have it rectified or erased (“right to be forgotten”, deleting your account deletes your personal data); restrict or object to processing based on legitimate interests; data portability (a copy in a machine-readable format); and to withdraw consent at any time where processing is based on consent. Exercise any of these by emailing contact@zofl.com from your account email. We respond within one month as the GDPR requires. You also have the right to lodge a complaint with your local data-protection authority (in the EU/EEA member state of your residence or workplace).
If you are a California resident: you have rights under the CCPA/CPRA, including the right to know, delete, and opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information as those terms are defined by law.
The Service is not directed to children under 16, we record a date of birth for every account and do not grant one to anyone under 16, and we do not knowingly collect personal data from anyone under 16. If you believe someone under 16 has provided us personal data, contact us and we will delete it.
Your account data is stored in the EU as described in Section 2. Two things reach outside it. First, an online match may be relayed by our game server in the United Kingdom or in the United States, which handles your IP address and connection data for the length of that match and stores the match recording. Second, ZOFL STUDIOS LLC is a United States company, and limited remote access by our team from outside the EU occurs strictly to administer and operate the Service.
The United Kingdom is covered by a European Commission adequacy decision, so a transfer there is a transfer to a country recognised as offering an adequate level of protection. For the United States server, and for our own remote administration, we rely on the standard contractual clauses in our hosting agreements together with the limits described in Section 2, and we keep such processing to the minimum needed to run a match.
We protect personal data with technical and organizational measures: passwords stored only as secure hashes, encrypted connections, row-level access controls in the database (your private identity record is readable only by your own account), key-based server access, and the hosting arrangements described above. No method of transmission or storage is completely secure, and, as an early-alpha service, we cannot guarantee absolute security; see the Terms of Use for the alpha’s disclaimers.
We may update this Privacy Policy from time to time. Changes take effect when posted, and the “Last updated” date and version above will change accordingly. For material changes we may additionally notify you in the Game or by email.
Privacy questions or requests: contact@zofl.com, or ZOFL STUDIOS LLC, 28 Church St, Ste 14 #6315, Winchester, Massachusetts 01890, USA.