LastBro Security and Safe Use

1. Protect your Google sign-in

LastBro uses Google sign-in. Enter your Google password only on the correct Google page; never send it to support, chat or a listing. Enable Google two-step verification or a passkey and check signed-in devices. Sign out after using a shared device.

If you suspect account takeover, first secure your Google account, end unknown sessions and then contact info@lastbro.com. Include the account, time and description, never a password, one-time code or access token.

2. Application protections

The application uses sessions with HttpOnly and SameSite cookies, checks for data-changing requests, access controls and separation of user and administrator functions. When operated over HTTPS, session cookies are set for secure transport. Uploaded media is checked according to the feature.

These measures reduce risks; they are not a promise of invulnerability or certification. Production-server security, updates, HTTPS configuration, permissions and any backups remain the operator’s responsibility. We do not claim unverified audits, continuous monitoring or a specific recovery time.

3. Private messages and My Trace

Chat and personal My Trace content are separated from public posts. They are not end-to-end encrypted or a vault technically inaccessible to the operator. A future letter has an opening date in the application, not a cryptographic time lock.

Do not store passwords, identity documents, banking credentials or data whose disclosure could cause serious harm. Keep a securely stored copy of important writing. Share photos with the relevant people’s permission and consider visibility.

4. Marketplace, links and payments

Check the seller and item before trading. LastBro does not provide escrow or guarantee delivery between users. Do not enter banking or card credentials through an unsolicited message link; you do not need to give them to another person to receive money.

Plus and first-party advertising use bank transfers with instructions in the signed-in order detail. Check the amount, currency, account and reference in My Orders. Verify unusual requests to change payment details through info@lastbro.com.

5. Reporting harmful content and vulnerabilities

Report harmful content using the available tool or info@lastbro.com with an exact link and description. Terms explain moderation and review. For immediate danger, contact the relevant emergency service rather than relying only on website support.

Send technical vulnerabilities to info@lastbro.com with the subject “LastBro security”. Include the affected URL, approximate time, description and safe reproduction steps using your own test account. Do not send access tokens, other people’s data or unredacted private messages.

Respect the law and other accounts: do not conduct destructive tests, cause outages, download bulk data or try to obtain others’ information. Provide a safe contact for follow-up. A report is not a promise of a reward or permission for further testing.

6. Incidents and personal data

An incident requires impact assessment, containment and suitable remediation. For personal-data breaches, the controller follows the GDPR, including notification to authorities and affected people where statutory conditions apply.

The privacy notice explains processing, recipients, deletion and your rights. Submitting a security report is not consent to marketing.