LastFirst

Privacy Policy

Last updated: October 12, 2026

LastFirst (lastfirst.app) is operated by LastFirst. This policy explains what information we collect when you use the site, how we use and share it, and how to reach us.

YouTube API Services

LastFirst uses YouTube API Services to read the public playlists you ask it to reverse. By using LastFirst, you agree to this Privacy Policy and to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy.

LastFirst does not ask you to sign in with Google and never accesses your YouTube account. It only reads public playlist information.

What we collect

  • Request logs from our application. For every request to lastfirst.app, our server records a shortened version of your IP address, the request method and path, the response status, and how long the request took. When you reverse a playlist, it also records that playlist's ID.
  • Web server access logs. Our web server records a shortened version of your IP address, the requested URL, and the request headers your browser sends, such as User-Agent and Referer. Addresses in the X-Forwarded-For and X-Real-IP headers are shortened the same way. Cookie and Authorization headers are redacted before they are written.
  • Shortened IP addresses. Neither log stores your full IP address. They keep only the first 24 bits of an IPv4 address (for example, 203.0.113.45 is recorded as 203.0.113.0) and the first 48 bits of an IPv6 address, with the rest set to zero.
  • Rate limiting. To stop any one visitor from using up the service's YouTube API quota, the server keeps a short-lived request counter per full IP address in memory. It is never written to disk.
  • The playlist link you paste. It is sent to our server only to look up the playlist through the YouTube Data API. Only the playlist ID is kept, as part of the request log above.

We do not use accounts, cookies, analytics, advertising, or tracking pixels.

Information stored on your device

If you choose a light or dark theme, that choice is saved in your browser's local storage under the key theme. It never leaves your device, and you can clear it at any time through your browser settings.

How we use it

We use this information only to keep LastFirst secure and running: to prevent abuse, enforce rate limits, and diagnose errors. We do not use it for profiling or advertising, and we do not sell it.

How it is shared

  • Google / YouTube. Video thumbnails on the results page load directly from YouTube's image servers (i.ytimg.com), so your browser sends your IP address and request headers to Google when they display. The watch links we generate open on youtube.com. In both cases the Google Privacy Policy applies. When looking up a playlist, our server sends the playlist ID to the YouTube Data API, but not your IP address.
  • Hosting provider. LastFirst runs on a server rented from DigitalOcean, where the logs above are stored.

We do not share this information with anyone else, except where required by law.

How long we keep it

Logs are kept for up to 90 days and then deleted automatically. The in-memory rate limiting data is discarded when it goes unused or the server restarts.

Children

LastFirst is not directed to children under 13, and we do not knowingly collect personal information from them.

Your choices and contact

Because our logs contain only shortened IP addresses, we cannot reliably tell which entries came from you, so we cannot find or delete individual log entries on request. All logs are deleted automatically after 90 days.

For questions or complaints about privacy, email revytplaylist@gmail.com.

Changes to this policy

If this policy changes, we will update this page and the date at the top.