Privacy Policy
Last updated: 17 August 2026
1. Who is responsible
The controller for the processing of personal data on this website is:
Aristotelis Alatzas
Email: [email protected]
2. What this site is
Wild Hoggs is a private, non-commercial fan site for the mobile game Last Z: Survival Shooter. It provides calculators, cost tables and reference data. It is not affiliated with the game's developers or publishers.
3. Using the site without an account
Most of the site works without signing in. In that case no personal data is stored in any database.
3.1 Stored on your device
So the calculators remember what you entered, the site stores data in your browser's
local storage (localStorage) — not in cookies. As long as you have no
account, this data never leaves your device:
wh-calc-…— your entries in the calculators (research, buildings, tank, caravan)wh-active-profile— which game profile is currently selectedwh-lang-redirected— whether you have already been sent to a language versionwh-auth-user— only when signed in: your sign-in statewh-pm-contacts,wh-unread-channels,wh-pending-dm-unreads— only when using the chat: your conversation partners and unread counts
The legal basis is § 25 (2) no. 2 TDDDG: storing this is strictly necessary for the feature you asked for. You can delete it at any time through your browser settings.
This site sets no cookies.
3.2 Server logs
When you open a page, your browser sends technically necessary information to the server: IP address, time, the address requested, browser and operating system identifiers, and the page you came from. This is collected by our host (see section 6) and used to run the site and defend against attacks. Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in a secure, working service.
3.3 Audience measurement
We use Cloudflare Web Analytics. According to the provider it works without cookies, without storing anything on your device and without fingerprinting. Only aggregated figures are recorded: which pages were opened how often, from which country, with which browser. Individual visitors cannot be identified and are not followed across visits. Legal basis: Art. 6 (1) (f) GDPR.
4. Using the site with an account
An account is optional. It syncs your calculator progress between devices and lets you use the chat.
4.1 At registration
- Email address — for signing in and in case we need to reach you
- Username — publicly visible in the chat
- Password — never stored in plain text, only as a hash (PBKDF2-SHA256, 100,000 iterations, individual salt)
- Server and faction — optional details about your game
- Language — for displaying the site
Legal basis: Art. 6 (1) (b) GDPR (performance of the user relationship).
4.2 While using the site
- Game profiles — name, server, faction and formation power per profile, entered by you
- Calculator progress — the same data as in 3.1, additionally on the server so it matches across your devices
- Chat messages — what you write in the public channels and in private conversations, with a timestamp
- Last seen — a timestamp so others can see who is online
- Last sign-in — to spot unusual access
- Sessions — a random identifier per signed-in device, valid for 30 days
- Address confirmation status — whether and when you confirmed your email address
4.3 If an account is blocked
Repeated rule violations — insults in chat, advertising, several accounts for one person — can lead to a block. What is then stored: the time, the reason as a fixed code (plus a short text for “other”), and the username of whoever issued it. You are shown the reason on your next sign-in attempt, together with the address you can write to. A block can be lifted; those entries are then deleted.
Legal basis is Art. 6(1)(f) GDPR — the legitimate interest in running a usable chat. You may object under Art. 21 GDPR; write to the address given above.
Administrative changes. When an email address is corrected by hand, or an account is blocked or deleted, the server log records who did it and which account was affected — for an address change, also the old and the new address. These entries sit with Cloudflare (see section 6) and are deleted according to its retention. The purpose is to keep such interventions traceable.
4.4 What others can see
Other signed-in users can see your username, faction, server and whether you are online — and of course whatever you write in the public chat. Your email address is visible to nobody except the administration.
5. How long data is kept
| Account and profiles | until you delete it — for unconfirmed addresses, see below |
|---|---|
| Calculator progress | until you reset it or delete the account |
| Sessions | 30 days, then automatically invalid |
| Confirmation and reset links | 7 days and 1 hour respectively; invalid afterwards, the record is removed during cleanup |
| Private messages | until either side deletes their account |
| Public chat messages | kept; on account deletion your name is replaced with “Deleted” so conversations stay readable |
| Server logs | according to the host's retention (see section 6) |
Accounts without a confirmed email address. After registration we send an email with a confirmation link. While it is unconfirmed, a notice appears on every page with the option to send the email again. An account may be deleted when both apply: the address has been unconfirmed for more than 30 days and the account has not been used for 90 days. Visiting the site is enough to be unaffected — whether or not the email was ever read. Deletion is not automatic; it is done by hand. The legal basis is Art. 5(1)(e) GDPR (storage limitation): an account nobody uses, with an address nobody can reach, no longer serves a purpose.
Confirmation exists solely for account security: a reachable address is the only way to restore access if a password is forgotten. The address is not used for advertising and is not passed on.
6. Processors and transfers
The site runs on Cloudflare, Inc. (Cloudflare Pages, D1 database, R2 storage, Workers). Cloudflare processes data on our behalf under Art. 28 GDPR. This site's database is located in Western Europe. Cloudflare is a company based in the USA; a transfer there cannot be ruled out. Cloudflare is certified under the EU-US Data Privacy Framework and additionally relies on the EU Commission's Standard Contractual Clauses.
If you follow the “Buy me a coffee” link you leave this site. Data processing there is governed by that provider's privacy policy; we transmit no data to them.
There are no other recipients. No data is sold.
7. Your rights
Under the GDPR you have the right to:
- Access (Art. 15) — “Download my data” in your profile gives you a complete copy immediately
- Rectification (Art. 16) — most details you can change in your profile yourself
- Erasure (Art. 17) — “Delete account” in your profile, effective immediately
- Restriction of processing (Art. 18)
- Data portability (Art. 20) — the copy from your profile is machine-readable
- Object (Art. 21) to processing based on legitimate interests
For anything the profile does not cover, an email to [email protected] is enough.
8. Right to complain
You may lodge a complaint with a data protection authority, in particular in the EU country of your residence, your workplace or the alleged infringement.
9. No automated decision-making
There is no automated decision-making or profiling within the meaning of Art. 22 GDPR.
10. Is providing data required?
You do not have to provide any data. Without an account you can use every calculator and table. Without an email address and username, however, no account can be created — and with it neither cross-device sync nor the chat.
11. Changes
If what the site does with data changes, this text changes with it. The date at the top shows the current version.