Privacy policy
Effective October 10, 2026.
What the extension sends us
On a supported auction page, the extension sends us the lot titlesThe wine names as the page prints them, with the vintage and bottle count where the page shows them. They are what we match against past sales; nothing else on the page is read. on that page and which site you are on. A click on a badge sends the wine we matched, to fetch its sales. It also sends your key and a random id for that browser install.
It never sends the page address, your bids, your account on the auction site, or anything from any other site. The one exception is a wrong-match report, sent only when you press the button; what it carries is listed below.
What we keep
- Your licence: your email, which of our plans or credit packs you bought, whether it is active, when it renews, and which browsers you have activated.
- A daily count per key: lots looked up, sales panels opened, cellar lines turned into keys, searches, and how many we could price. Not the titles.
- A wrong-match report, only when you press the button: the lot title and vintage, what we matched it to, what the badge showed, the site and the page address, so we can look at the lot. Kept with your key.
Payments are taken by our payment partner, the seller of recordThe company that charges your card and appears on your statement. Your card details go to them, never to us., under their own privacy policy.
We keep no lot titles from lookups and no IP addresses. To spot an abused key we count the network rangesThe first part of an IP address, shared by many connections. It tells us roughly how many places a key is used from, not who you are. and browsers it is used from in a day: each range with the end of the address cut off, and each browser's random id, kept for that day and the two after, then deleted.
We do not know what wine you buy. The houses do not tell us which lots you bid on or won, and the extension does not send it. The only purchases we know of are the ones you make from us. The next section is the one exception to what we keep.
If you buy credits
We note which wines your key has been charged for, so you are not charged twice inside the free window: the matched wine and vintage in a standard form, not the words you typed, deleted 30 days after the charge.
We also keep a statement of your purchases and the balance after each, to check a balance or work out a refund, for as long as the licence lasts.
If you ask for a quarterly evaluation
With a yearly subscription you can have your cellar re-priced and emailed each quarter. That needs your list, so we keep it only if you switch this on: the wines and the address to send to, used for nothing else. Switch it off, or cancel the subscription, and we delete the list.
Your cellar list in the extension
The list you import in the options page stays in your browser. Each line goes to our server once, to become a lookup key, and the server keeps nothing from it but the line count in the daily count above.
Links to CellarTracker
A badge's sales panel links to the wine's page on CellarTracker, an independent site, for its latest tasting notes. Nothing goes there unless you click. The link carries the wine and vintage, nothing about you or your key, and no referrer, so CellarTracker is not told which page or lot you came from and we are not told you clicked. On their site, their privacy policy applies.
Files you upload here
We process them and use them for nothing else. A file uploaded for the free coverage count is deleted within 24 hours. If you buy the report, we keep the file and the report until the download window closes, then delete both. Your list never goes into our own data.
A Cellar Maxxing list is the same: file and ranking kept for 24 hours so you can come back to the page, then deleted. If the ranking is opened, with a plan or a purchase, both are kept a week from then, as a bought report is.
Cookies
We set no tracking cookies of our own. The app page keeps your key in your browser so you stay signed in. The only cookies set here come from the two advertising tags in the next section.
If our extension holds your key in this browser, our sign-in pages (the app, the cellar valuation and Cellar Maxxing) take the key from it, so you are signed in without pasting it twice. It passes inside your browser and to nobody else. After you sign out here, the same key is not taken again until you put a different one in the extension.
If you arrive from an advert or a link
When you arrive from one of our adverts or a link on another site, your browser remembers which for 30 days: the advert's labels (network, campaign and the search words it was shown for) or the site's name, the page you landed on, and whether you were on a computer or a phone. This sits in your browser's storage, not a cookie.
We count those arrivals, and the clicks on our install and subscribe buttons that follow, per advert per day. The count identifies nobody. If you ask for alerts or start a subscription within those 30 days, the labels are kept with it, so we know which adverts bring customers. With a subscription they pass through our payment partner's checkout on the way.
The public pages load two advertising tags, Google's and Meta's (Facebook and Instagram). Each sets its network's cookie. They tell the network when one of its adverts led to a step here (asking for alerts, clicking install or subscribe, starting a trial), and let us show our adverts again on that network to people who have visited this site. Neither tag is told your email, your key, or which wines you look at.
The tags do not load on the signed-in pages (the search app, the cellar evaluation, the lookups page), on any address carrying a key or token, or when your browser sends the Global Privacy ControlA browser setting that tells sites not to sell or share your data. Firefox, Brave and some privacy extensions can send it. signal. Until October 17, 2026 they loaded only for a visit from that network's own advert.
Auction alerts
If you ask for alerts, we store the email you give, which sales you switched on, and when we wrote to you. Nothing is sent until you confirm the address from the first message. Every alert has an unsubscribe link that turns off the sales you switched on.
Stopping all email
Every watchlist email, deal email and invitation, and every sale reminder sent to a key, ends with a link that stops all LastHammer email to that address; most mail apps also show it as an unsubscribe button. We keep the address on that list so nothing is sent to it again, and the page the link opens can turn email back on.
Children
LastHammer is for adults of legal drinking age. It is not meant for children, and we do not knowingly collect anything from anyone under 13. If you think a child has given us an email address, write to us and we will delete it.
Fonts
The site's fonts are served from lasthammer.com itself, so loading a page tells no font service who you are.
Contact
LastHammer is run by App Holding Group LLC, 16192 Coastal Highway, Lewes, DE 19959, USA.