Last Toast Privacy Policy

Effective date: 4 November 2026

This policy explains how the Last Toast app ("Last Toast", "the app") handles information on iPhone, iPad, Android and Mac. Last Toast is published by New Version Limited, a company based in New Zealand ("we", "us", "our"). New Version Limited is the data controller (and the "agency" under the New Zealand Privacy Act 2020) for any personal information described in this policy. The app is available worldwide through the Apple App Store and Google Play.

The short version

• Last Toast has no accounts, no sign-in, no analytics, no advertising, no tracking and no internet server.
• What the app remembers is stored only on your device. We never receive it.
• When you play together, game information travels only between the devices at your party, over your local Wi-Fi.
• Purchases are handled entirely by Apple or Google. We never see your payment details; the app only learns whether you own the Pass.
• You can delete everything the app has stored at any time.
• The only personal information we ever hold is what you choose to send us when you email lasttoast.support@newversion.studio.

What the app stores on your device

The app keeps a small local database (SQLite) on your device so that it works the way you left it. It contains:

• Your display name, the name you type on your name tag. It does not need to be your real name.
• Settings: music and sound effects on or off, volumes, the track you picked, haptics, reduce motion, default round length, and whether you have finished or skipped the tutorial and the first-launch introduction.
• Game records: for each finished game, the case played, the number of players, the character you played, whether you were the killer or the accomplice, whether you survived, your score and whether the killer was caught. Your detective rank and suspect album are worked out from these records on the device.
• Daily cold case results: which days you solved the solo puzzle, your score and your streak.
• Badges you have earned.
• A host snapshot: if your device is hosting, a copy of the current game so an interrupted party can be resumed.
• Seat tokens: random codes that let your device rejoin a party you were part of after a dropped connection.
• A cached record of your Last Toast Pass, so the app knows which features are unlocked without asking the store every time. On Android, if a Google Play reviewer enters the review code from our store notes, the date that review access ends is stored here too.

This information stays on your device except as described under "Playing together on your local network" below. We do not have a copy of it and cannot see it.

What we do not collect

We do not collect, receive or store through the app:

• your name, email address, phone number or any other contact details;
• your location;
• your contacts, photos, files or microphone audio;
• device identifiers, advertising identifiers or IP addresses;
• usage statistics, analytics or crash reports, whether through our own code or third-party SDKs;
• payment or card details.

The app contains no third-party analytics, advertising or tracking software. It does not track you across other companies' apps or websites, and it contains no advertising.

If you have chosen in your device settings to share diagnostics or crash reports with app developers, Apple or Google may pass anonymised crash reports to us. That sharing is controlled by Apple or Google under their own privacy policies, and you can turn it off in your device settings. Apple and Google also give us aggregated sales and download reports that do not identify you.

Playing together on your local network

Last Toast is played on several devices in the same room. One device hosts the party and the others join it over the same Wi-Fi network.

• The host device runs a small game server on your local network and announces the party using Bonjour (a service named _lasttoast._tcp). While a party is open, other devices on the same Wi-Fi network can see that a Last Toast party exists, its four-letter room code and the host's display name.
• To show a join code, the host device reads its own local network address and puts it in a QR code on screen. That address stays on the local network.
• During a game, the devices exchange display names, character assignments, the cards and clues each player holds, and the moves each player makes. Each device receives only what the rules allow it to see.
• This information travels only between the devices at your party. It is never sent to us, to a server or over the internet.
• Game traffic on your local network is not encrypted. Last Toast is designed for local play among people you invite. We recommend playing on a home or private network you trust, not on public Wi-Fi.

On iPhone, iPad and Mac the system asks for permission to find and connect to devices on your local network. Without it, devices cannot find each other, but pass-and-play on a single device still works.

Camera

The app uses your camera only to scan the host's QR code so you can join a party. Camera frames are processed on your device to read the code and are never saved, recorded or sent anywhere. You can deny camera access and join instead by picking the party from the nearby list or typing the host address and room code. You can change the permission at any time in your device settings.

Sharing a game result

The app may offer a button to share an image of a game result. This is entirely your choice. If you tap it, the image is handed to your device's share sheet, and where it goes is decided by you and by the app you pick. We do not receive it, and the app never shares anything on its own.

Purchases and the Last Toast Pass

The Last Toast Pass is sold as an in-app purchase through the Apple App Store or Google Play, using their standard in-app purchase systems. It is bought by the host; guests always play free.

• Apple or Google processes the payment and handles your billing details under their own privacy policies. We never see your name, card or account details.
• The store tells the app on your device which products you own (an entitlement). The app keeps a record of that on your device so it can unlock the Pass. We do not run a server that receives or stores purchase records.
• To restore a purchase on a new device, use Restore purchases in the app. The store, not us, confirms your purchase.

Apple's privacy policy is at https://www.apple.com/legal/privacy/ and Google's is at https://policies.google.com/privacy.

Artwork and music

The portraits, scenes and music in the app were created with AI tools (Grok Imagine and Suno, through the Kie.ai service) while we were making the game, and they are bundled inside the app. No AI runs on your device or in the cloud while you play, and nothing you type or do in the app is sent to an AI service.

Children

Last Toast is a murder-mystery party game with references to poisoning, death, alcohol and drugs. It is rated for ages 12 and over and is not directed at children under 13.

The app collects no personal information from anyone, so we do not knowingly collect personal information from children under 13, in line with the US Children's Online Privacy Protection Act (COPPA), or from anyone under the age of digital consent where they live. If you believe a child has sent us personal information, for example by email, contact us at lasttoast.support@newversion.studio and we will delete it.

New Zealand: the Privacy Act 2020

We are a New Zealand company, and we handle any personal information we hold in line with the Information Privacy Principles (IPPs) in the Privacy Act 2020. In practice:

• Collection (IPPs 1 to 4). We collect personal information only when you send it to us, such as in an email, and only for the purpose of replying to you. We collect it directly from you.
• Storage and security (IPP 5). Emails are kept in our email account, protected by that provider's security and our own access controls.
• Access and correction (IPPs 6 and 7). You can ask us at any time for the personal information we hold about you and ask us to correct it.
• Accuracy, retention, use and disclosure (IPPs 8 to 11). We keep information only as long as needed (see "How long data is kept"), use it only to answer you, and do not give it to anyone else except where the law requires.
• Disclosure outside New Zealand (IPP 12) and unique identifiers (IPP 13). We do not send personal information to anyone overseas for their own use, and we do not assign unique identifiers to you.

If you are not happy with how we have handled your personal information, please contact us first. You also have the right to complain to the New Zealand Privacy Commissioner (https://www.privacy.org.nz).

European Economic Area, United Kingdom and Switzerland: GDPR and UK GDPR

Who is the controller. New Version Limited, New Zealand, contactable at lasttoast.support@newversion.studio, is the controller of any personal data described in this policy.

What we process and why. The app does not send us personal data. The only personal data we process is what you choose to put in an email to us (your email address and the content of your message). Our legal basis is our legitimate interests in answering your question and supporting the app (Article 6(1)(f)), and, where you ask us to deal with a request, the steps needed to do so. We do not rely on consent, and we do not carry out automated decision-making or profiling.

Your rights. You have the right to access, correct, delete or restrict the processing of your personal data, to object to processing based on legitimate interests, to data portability, and to complain to your local data protection authority. Because we do not collect or hold personal data from the app, there is normally nothing to access or delete beyond any emails you have sent us. The data the app stores on your device is under your control and you can view and delete it there.

International transfers. We are based in New Zealand, which the European Commission and the United Kingdom recognise as providing an adequate level of data protection. Any email you send us is therefore processed in New Zealand (and wherever our email provider operates) on that basis.

California and other US states: CCPA and CPRA

If you live in California or another US state with a privacy law, you may have the right to know what personal information is collected, to delete or correct it, to opt out of its sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for using these rights.

We do not sell or share personal information. We do not use it for targeted or cross-context behavioural advertising, and we do not collect sensitive personal information. In the past 12 months we have not collected personal information through the app. If you email us, we use your email address and message only to reply to you.

International users

Last Toast is published from New Zealand to all countries and regions in which Apple and Google make it available. The app works on your device and on your local network, so your game data does not travel between countries. Any personal information you send us by email is handled in New Zealand as described above. Local laws in your country may give you extra rights, and nothing in this policy limits them.

How to make a request

Email lasttoast.support@newversion.studio to ask for access to, correction of, or deletion of personal information, or to exercise any right described above. We will reply within the time the law in your country requires (in New Zealand, within 20 working days). In most cases our answer will be that we hold no data about you apart from your email. We may ask you to confirm who you are, but we will not ask for more personal information than is needed to answer you.

How to delete your data

Everything the app stores is on your device, so you are in control of it:

• Settings, then Data & privacy, then Delete everything removes your name, settings, game records, badges, host snapshot, seat tokens and the cached Pass record from the device. You can also clear only your case records and badges there.
• Deleting the app from your device removes all of its stored data.

Deleting local data does not cancel a subscription. Your purchases stay with your Apple or Google account and can be restored later with Restore purchases.

How long data is kept

• Data on your device is kept until you delete it or delete the app. A host snapshot is replaced as the game changes and is only used to resume an interrupted party.
• Game information exchanged between devices at a party is held in the devices' memory for the game and is not kept by us at all.
• Emails you send us are kept only as long as needed to answer you and deal with any follow-up, and are then deleted.

Security

The app's data stays inside the app's private storage on your device, which is protected by your device's own security, such as your passcode and the operating system's app sandbox. Because we hold no personal data from the app, there is no central database of players that could be breached. As noted above, game traffic on your local network is not encrypted, so play on a network you trust.

Changes to this policy

If we change how the app handles information, we will update this policy, change the effective date above and publish the new version in the app and on our website. If a change is significant, for example if the app ever starts collecting personal data, we will tell you in the app before it takes effect.

Contacting us

Questions, requests or complaints about privacy:

• New Version Limited, New Zealand
• Email: lasttoast.support@newversion.studio

Our Terms of Use are available in the app under Settings, then Legal.