Privacy
Privacy
MyLastTab is anonymous by design. This page lists, in plain language, what the service keeps, for how long, and what it never keeps. It describes how the site actually works today.
Last updated: September 2026
Anonymous by design
There are no accounts and no login. You write a short description of your last browser tab, or of something you did today, and it becomes part of an anonymous, shared picture of the internet. The site never reads your browser tabs; it only receives the text you choose to send.
What each entry keeps
The text you wrote, its category, mood and type, optional tags, a two-letter language hint, the local hour and time zone name reported by your browser, whether it was written on the website or in the walkable town (with a coarse district in the town), its lot number in the city, the time it was created, and how many reactions and reports it has received.
Your network address
The application never stores your raw IP address and never writes it to its logs; like any website, it only sees the address while answering your request. To limit spam and abuse, the server turns it into a pseudonymous key using a secret that changes every day (at midnight UTC), so keys from different days cannot be matched with each other. That key is kept with your entry or reaction for at most 48 hours and then erased, and it is also used for short-lived rate-limit counters that expire within minutes to one day. It is used only for rate limits, duplicate detection and allowing one reaction per entry per day.
Deleting your entry
When you add an entry, your browser receives a one-time delete key and keeps it in local storage. The server stores only a fingerprint of that key (a SHA-256 hash), which cannot be turned back into the key and does not identify you. From the same browser you can delete the entry at any time: open its building in the city and choose Delete my entry. If you clear your browser storage or use another device, the key is gone and the server cannot tell the entry is yours; you can still report it.
Moderation and reports
Before anything is saved, the text is checked automatically for links, email addresses, phone numbers, ID numbers and abusive language; text that fails the check is not stored. Anyone can report a public entry and pick a reason. A report keeps only the entry, the reason and the time. After several reports an entry is hidden everywhere until an administrator reviews it, and administrators can hide or remove any entry.
The walkable town
If you enter the walkable town, your position and the display name you choose are shared live with the other visitors in your instance and kept only in the server's memory while you are connected. If you start the hidden-trace search, a hashed identifier of your browser tab is stored with that entry for at most 48 hours, so only that tab can see its result.
What we never store
No raw IP addresses, names, accounts, email addresses tied to your entries, browsing history, the pages you visit, or screenshots. There is no analytics and no advertising or social media tracking.
Services that process data
The hosting provider that runs the site and its database. An email provider that delivers contact form and newsletter messages. When the found poem feature is switched on, Anthropic receives the text of the public entries you pick to weave into a poem, and nothing about you. When distributed rate limiting is switched on, Upstash holds the short-lived rate-limit counters, keyed by the pseudonymous values described above. Open-Meteo is asked for the town's weather by the server; no visitor data is sent. Fonts and icons are served from this site.
Contact and newsletter
If you write through the contact form or subscribe to the newsletter, the email address and message you provide are used only to reply or to send occasional updates. The newsletter is single opt-in; subscribers are not kept in a database, and these emails are never linked to your entries.