Legal Operations

Privacy
Policy

Welcome to the Slop Shop's legal framework. We process data to keep the machines running, but we respect your boundaries within the swamp.

Last Updated: April 18, 2026

database

1. What Data We Collect

We collect the bare minimum needed to make the slop work. No creepy tracking, no selling your soul to data brokers — just what it takes to run the site, run the games, and keep accounts safe.

  • Account Data: Email addresses, usernames, and profile configurations (when you create an account or subscribe to email updates).
  • Analytics & Product Data: Pages viewed, clicks, scroll depth, approximate country/region derived from your IP address, browser and device type, UTM/referrer source, and anonymized session recordings (video-like replays of your clicks, scrolls, and page transitions — form field values are masked by default). We also compute a stable pseudonymous browser fingerprint (a SHA-256 hash of things like user agent, screen size, timezone, and language) so that the same visitor in the same browser counts as one person even across incognito sessions. This is not tied to your real identity.
  • Telemetry Data: Device specs and crash logs (so we can fix what breaks).
  • Transaction Data: Purchase history and billing info (processed securely by our payment provider — we never see your full card number).
  • Cookies & Local Storage: Used by our analytics provider to recognize returning visitors, and to save small preferences on the site. No third-party ad/tracking cookies.

2. How We Use Your Data

build

Service Provision

Making the games run, keeping your progress saved, and letting you talk to other players without the whole thing catching fire.

insights

Analytics & Improvement

Aggregate stats so we can tell which ducks are too powerful and nerf them.

3. Third-Party Services

We use a small set of standard infrastructure partners, each contractually bound to only handle data for the service we ask them to provide:

  • Amazon Web Services (AWS) — hosts the site, runs our email pipeline, and stores contact/subscribe submissions.
  • PostHog — product analytics, session replay, and feature flags. Sees the Analytics & Product Data described above.
  • Google Fonts — serves the typefaces on this site.

We don't sell your data to ad networks or data brokers. No third-party ad pixels are loaded on this site.

child_care

4. Children's Privacy (COPPA)

We don't knowingly collect personal info from kids under 13 without verifiable parental consent. If you're a kid, check with a parent before making an account. If you're a parent and believe your kid signed up without permission, email us and we'll wipe it.

5. Data Retention

We keep account data while your account is active and for a reasonable period after, for backup and legal compliance. Delete your account at any time and we'll purge personal data on a rolling schedule.

6. Your User Rights

visibility Right to Access
edit Right to Rectification
delete Right to Erasure
block Right to Restrict
download Data Portability

7. Contact Data Protocol

Need to escalate a privacy concern? Email us and we'll get back to you.

Contact Compliance mail